- nexa - server-nexa.polito.it

The NSA's Hubris and the Shadow Brokers 0-day
by Alberto Cammozzo Sept. 28, 2016

Sept. 28, 2016

Un interessante riflessione sulla scelta di NSA di non informare gli interessati del leak di zeroday. The NSA's Hubris and the Shadow Brokers 0-day <https://www.lawfareblog.com/nsas-hubris-and-shadow-brokers-0-day> Reuters has a possibly incendiary report on the FBI investigation into the "Shadow Brokers" dump of NSA tools. According to a Reuters exclusive, the NSA was aware that their tools may have been exposed almost immediately after it occurred, and yet never notified Cisco and Fortinet about the vulnerabilities in their system. There is a defensible argument for not informing a vendor about a zero-day where the Agency is confident nobody else knows about it. But if the NSA has reason to suspect an adversary has captured a zero-day—the use of which could substantially impact US interests—it is critical that the NSA report it to the vendors in the interest of defense. Apparently the NSA disagrees, appearing to claim that they are able to detect usage and therefore only need to alert vendors or otherwise respond to the breach once there is evidence someone else is using the stolen zero day. From Reuters: After the discovery, the NSA tuned its sensors to detect use of any of the tools by other parties, especially foreign adversaries with strong cyber espionage operations, such as China and Russia. That could have helped identify rival powers’ hacking targets, potentially leading them to be defended better. It might also have allowed U.S officials to see deeper into rival hacking operations while enabling the NSA itself to continue using the tools for its own operations. Because the sensors did not detect foreign spies or criminals using the tools on U.S. or allied targets, the NSA did not feel obligated to immediately warn the U.S. manufacturers, an official and one other person familiar with the matter said. The problem with this logic lies in the nature of the vulnerabilities released by the Shadow Brokers. Two exploits in particular challenge the “we’d know if it were used” premise—the EXTRABACON exploit targeting Cisco equipment and the EGREGIOUSBLUNDER exploit targeting Fortigate. Both of the vulnerabilities directly impact systems used in the United States—including the national security systems NSA is tasked with defending—and, more critically, would not be able to be detected in the wild by NSA’s sensors. []

1 0

Spy agencies launch 'real-time' terror tracker
by Alberto Cammozzo Sept. 28, 2016

Sept. 28, 2016

<https://euobserver.com/justice/135231> *Spy agencies launch 'real-time' terror tracker* European intelligence agencies launched a shared "interactive real-time" database over the summer to track suspected jihadists, EUobserver has learned. The move is part of a broader EU-wide trend triggered by last year's migration crisis, a spate of terror attacks and the threat of Islamist fighters returning to Europe from Syria. Dozens of intelligence agencies at the Dutch-led Counter-Terrorism Group (CTG) in The Hague set up an "interactive operative real-time information system" of people suspected of being "jihadist troublemakers", said Germany's federal ministry of interior in a document seen by this website. The CTG was founded in 2002 and includes some 30 intelligence agencies from around Europe. Dubbed Operation Platform, the system was launched in July, but no public statement was released at the time. A February statement from both the German and Dutch intelligence agencies had announced a July launch of a system. One senior EU official has described it as an IT system with people working on it 24 hours a day, seven days a week. How they access people's details in real time and what details are stored is unclear. There are also larger questions on oversight and fundamental rights, and the system has echoes of the US-led mass surveillance disclosed in 2014 by former NSA contractor Edward Snowden. The blow-back from the Snowden revelations is still playing out. Despite this, 23 out of 30 European intelligence agencies and services "promised" to participate in Operation Platform. Germany says it has sent one officer from its domestic intelligence agency, the BfV.

1 0

I: Perché dobbiamo produrre dati digitali che muoiano come noi
by Elia Gabriele Sept. 28, 2016

Sept. 28, 2016

http://motherboard.vice.com/it/read/perche-i-dati-digitali-devono-morire-co…<http://motherboard.vice.com/it/read/perche-i-dati-digitali-devono-morire-co…> riprende studio sulle ACM Transactions on Computer-Human Interaction di University of Lancaster, University of California, e Carnegie Mellon University sulla difficoltà di elaborazione del lutto a causa della mancanza dell’esperienza catartica di distruggere i beni fisici sopravvissuti allo stesso e delle sue conseguenze, problema poco studiato ma che sarà sempre più grande. gabriele Questo messaggio e i suoi allegati sono indirizzati esclusivamente alle persone indicate. La diffusione, copia o qualsiasi altra azione derivante dalla conoscenza di queste informazioni sono rigorosamente vietate. Qualora abbiate ricevuto questo documento per errore siete cortesemente pregati di darne immediata comunicazione al mittente e di provvedere alla sua distruzione, Grazie. This e-mail and any attachments is confidential and may contain privileged information intended for the addressee(s) only. Dissemination, copying, printing or use by anybody else is unauthorised. If you are not the intended recipient, please delete this message and any attachments and advise the sender by return e-mail, Thanks. [rispetta l'ambiente]Rispetta l'ambiente. Non stampare questa mail se non è necessario.

1 0

Switzerland will notify citizens when they have been spied on under new surveillance laws
by Alberto Cammozzo Sept. 28, 2016

Sept. 28, 2016

<http://www.telegraph.co.uk/technology/2016/09/26/switzerland-will-notify-ci…> Switzerland will have to notify citizens when they have been monitored by the country’s spy agencies under new surveillance laws <https://www.admin.ch/opc/fr/federal-gazette/2015/6597.pdf>. Voters overwhelmingly backed the laws in a referendum on Sunday, with 66 per cent voting in favour. They give police and intelligence agencies the authority to tap phones and monitor emails, in keeping with the powers in other countries. However, unlike in many regimes, citizens will be told when they have been spied on. Under an “obligation to inform the person surveilled”, the SRC, the Swiss intelligence agency, must contact anyone who has been monitored within a month after surveillance ends, giving them details about how and for how long they were watched. The SRC must also tell a suspect why they have been monitored, although there are exceptions – if it is against the public interest, if it would affect legal proceedings, or if the information could put people in danger. [...]

1 0

Sindacati e piattaforme
by Antonio Casilli Sept. 28, 2016

Sept. 28, 2016

Why the digital gig economy needs co-ops and unions MARK GRAHAM and ALEX WOOD (Oxford Internet Institute) https://www.opendemocracy.net/alex-wood/why-digital-gig-economy-needs-co-op… -- Antonio A. Casilli Associate Professor, Telecom ParisTech Research Fellow, Edgar-Morin Center (EHESS) Member, Interdisciplinary Institute for Innovation (i3 UMR 9217 CNRS)

1 0

Airbnb Shows How Private Sector Can Use Data to Fight Discrimination
by Alessandro Mantelero Sept. 27, 2016

Sept. 27, 2016

Airbnb Shows How Private Sector Can Use Data to Fight Discrimination In December 2015, researchers at Harvard University discovered a disturbing trend on the popular home-sharing service Airbnb: hosts were routinely discriminating against would-be guests on the basis of race. In response, the company brought in experts, including former Attorney General Eric Holder, to conduct a comprehensive review of its platform to identify opportunities to prevent discrimination. Airbnb recently released a report summarizing the results of this review and detailing a number of its commitments to use data to combat bias in the booking process. In doing so, Airbnb has become the poster child for how companies can use data as a powerful force to combat human bias and discrimination. Despite common claims that algorithms and big data will cause discrimination, the Harvard report found it was human-made decisions, rather than data-driven algorithmic ones, that were at fault for the bias on Airbnb. In fact, it was the availability of data that allowed this discrimination to be identified. The study found that Airbnb users with “distinctively African-American names” have approximately a 16 percent lower acceptance rate for bookings than individuals with “distinctively White names.” The trend is present regardless of the race of the host, whether the host and guest share the property, and the listing price. The researchers conclude that specific features of Airbnb, such as allowing hosts to screen guests and providing them the names of potential guests, facilitates discrimination. Airbnb has acknowledged the bias present on its platform, noting that “minorities struggle more than others to book a listing,” and has created a plan to tackle discrimination on its platform. https://www.datainnovation.org/2016/09/airbnb-shows-how-private-sector-can-… -- Prof. Avv. Alessandro Mantelero Politecnico di Torino Nexa Center for Internet and Society | Director of Privacy Politecnico di Torino–Tongji University| Coordinator, Double Degree program in Management and IP Law Nanjing University of Information Science and Technology | Part-time Expert, School of Public Administration European Data Protection Law Review | Associate Editor http://staff.polito.it/alessandro.mantelero EMAIL POLICY: once a day (Mon-Fri)

1 0

44° Nexa Lunch Seminar - 28 settembre 2016
by Giuseppe Futia Sept. 26, 2016

Sept. 26, 2016

Se non visualizzi correttamente questo messaggio clicca qui <http://nexa.polito.it/lunch-44> NEXA 44°Nexa Lunch Seminar Mercoledì 28 settembre 2016, ore 13.00 - 14.00 Via Boggio 65/a, Torino (primo piano) http://nexa.polito.it/lunch-44 Il progetto sulle Open Educational Resources del Global Network on Internet and Society Research Centers (NoC) Speaker Francesco Mecca (Intern Berkman Klein Center, Harvard), Lorenzo Canova (Research Fellow Centro Nexa) This event will be webcast live: http://nexa.polito.it/upcoming-events Da ottobre 2014 il Centro Nexa coordina il Global Network of Internet & Society Research Centers <https://networkofcenters.net/> (NoC o Rete dei Centri), lanciato dal Berkman Klein Center for Internet & Society della Harvard University <https://cyber.harvard.edu/> nel 2012 per favorire la cooperazione tra i più importanti centri Internet & Società a livello globale. Il NoC ad oggi include 76 centri e più di 190 ricercatori da tutto il mondo. I vari centri del NoC producono e pubblicano ogni anno un vasto corpo di risorse didattiche e di ricerca. Con il progetto “NoC educational resources <http://noc-wiki.nexacenter.org/view/Special:BrowseData/Educational_Resource…>” queste risorse sono state raccolte e indicizzate e tramite una *Wiki semantica* (già utilizzata come piattaforma per il coordinamento del NoC), per promuovere la scoperta e il riutilizzo del materiale didattico aperto, oltre che per rafforzare le potenzialità di matchmaking offerte dalla Wiki semantica. Il materiale fino ad oggi raccolto conta 87 risorse da 20 centri del NoC. Il progetto è stato seguito in prima persona da *Francesco Mecca*, studente del corso Rivoluzione Digitale del Politecnico di Torino, durante la sua Internship estiva presso il Berkman Klein Center della Harvard University ed è stato coordinato dal Centro Nexa su Internet & Società in collaborazione con il Berkman Klein Center e il Centro de Estudos sobre Tecnologia e Sociedade (CEST) <http://www.cest.poli.usp.br/> dell’Università di Sao Paolo. /Ingresso libero - Saranno disponibili panini e bibite per coloro che si saranno registrati su http://lunch44.eventbrite.com/ entro il 26 settembre./ Speaker - e informazioni supplementari [MECCA - CANOVA] FRANCESCO MECCA è uno studente di ingegneria informatica presso il Politecnico di Torino. Da studente del corso di Rivoluzione Digitale è entrato in contatto con lo staff del Centro Nexa. Nell’estate 2016 ha lavorato come intern al Berkman Klein Center al progetto NoC Education. I suoi interessi principali sono il software libero e la programmazione. Il suo blog è all’indirizzo: francescomecca.eu. LORENZO CANOVA, Staff Research Fellow del Centro Nexa dal 2014, è laureato in Ingegneria gestionale presso il Politecnico di Torino. I suoi interessi di ricerca si sono focalizzati principalmente sugli Open Governement Data (e la loro qualità), sulla trasparenza e sulle piattaforme collaborative. Letture consigliate e link utili * Fabio Nascimbeni, /The Contribution of Openness to Transforming Education, European Journal of Education/, 2015 * The Global Network on Internet and Society research centers (NoC) - Guiding Principles, https://networkofcenters.net/guiding_principles * Wiki semantica del NoC - http://noc-wiki.nexacenter.org/ Che cosa sono il Centro Nexa e i cicli di incontri “Mercoledì di Nexa” e “Nexa Lunch Seminar” Il Centro Nexa su Internet & Società del Politecnico di Torino (Dipartimento di Automatica e Informatica) è un centro di ricerca indipendente e interdisciplinare che studia Internet e il suo effetto sulla società. Maggiori informazioni all'indirizzo: http://nexa.polito.it/about. Durante i “*Mercoledì di Nexa*”, che si tengono *ogni 2° mercoledì del mese* alle *ore 18 in punto*, il Centro Nexa su Internet e Società apre le sue porte non solo agli esperti e a tutti coloro i quali lavorano con Internet, ma anche a semplici appassionati e cittadini. Il ciclo di incontri intende approfondire, con un linguaggio preciso ma divulgativo, i temi legati alla Rete: motori di ricerca, Creative Commons, social networks, open source/software libero, neutralità della rete, libertà di espressione, privacy, file sharing, big e open data, smart cities e molto altro. Al centro di quasi tutti gli incontri un ospite pronto a dialogare con i direttori del Centro Nexa, il Prof. Juan Carlos De Martin del Politecnico di Torino e il Prof. Marco Ricolfi dell'Università di Torino, nonché lo staff e i Fellows del Centro Nexa. Maggiori informazioni sui Mercoledì di Nexa, incluso un elenco di tutti i “Mercoledì” passati, sono disponibili all'indirizzo: http://nexa.polito.it/mercoledi. Si segnala inoltre che dal maggio 2012 *ogni 4° mercoledì* del mese *dalle ore 13 alle ore 14* il Centro Nexa organizza anche i "*Nexa Lunch Seminar*". Una lista di tutti i “Lunch Seminar” passati è disponibile all'indirizzo: http://nexa.polito.it/lunch-seminars. See our events calendar <http://nexa.polito.it/events> if you're curious about future luncheons, discussions, lectures, and conferences not listed in this email. Our events are free and open to the public, unless otherwise noted. Maggiori informazioni sui Nexa Lunch Seminar e i Mercoledì di Nexa, sono disponibili all'indirizzo: http://nexa.polito.it/events. Weekly Events Newsletter. Sign up <http://nexa.polito.it/mailing-lists> to receive this newsletter if this email was forwarded to you. To manage your subscription preferences, please click here <https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa>. Connect & get involved: Jobs, internships, and more <http://nexa.polito.it/get-involved> Nexa Center for Internet and Society Newsletter

1 1

European Data Protection Supervisor_Opinion on coherent enforcement of fundamental rights in the age of big data
by Alessandro Mantelero Sept. 26, 2016

Sept. 26, 2016

Opinion 8/2016 EDPS Opinion on coherent enforcement of fundamental rights in the age of big data https://secure.edps.europa.eu/EDPSWEB/webdav/site/mySite/shared/Documents/E… -- Prof. Avv. Alessandro Mantelero Politecnico di Torino Nexa Center for Internet and Society | Director of Privacy Politecnico di Torino–Tongji University| Coordinator, Double Degree program in Management and IP Law Nanjing University of Information Science and Technology | Part-time Expert, School of Public Administration European Data Protection Law Review | Associate Editor http://staff.polito.it/alessandro.mantelero EMAIL POLICY: once a day (Mon-Fri)

1 0

More accountability for big-data algorithms
by Alessandro Mantelero Sept. 26, 2016

Sept. 26, 2016

More accountability for big-data algorithms To avoid bias and improve transparency, algorithm designers must make data sources and profiles public. 21 September 2016 http://www.nature.com/news/more-accountability-for-big-data-algorithms-1.20… -- Prof. Avv. Alessandro Mantelero Politecnico di Torino Nexa Center for Internet and Society | Director of Privacy Politecnico di Torino–Tongji University| Coordinator, Double Degree program in Management and IP Law Nanjing University of Information Science and Technology | Part-time Expert, School of Public Administration European Data Protection Law Review | Associate Editor http://staff.polito.it/alessandro.mantelero EMAIL POLICY: once a day (Mon-Fri)

1 0

CINI presenta il nuovo Laboratorio Nazionale Informatica e Società - 27 settembre, Camera dei Deputati
by Giuseppe Futia Sept. 26, 2016

Sept. 26, 2016

Gentilissimi, Il 27 settembre alla Camera dei Deputati (Sala della Regina) verrà presentato il nuovo *Laboratorio Nazionale su Informatica e Società del CINI* (il Consorzio Interuniversitario Nazionale per l'Informatica, v. http://consorzio-cini.it/) Oltre alla Presidente *Laura Boldrini*, che porterà i saluti istituzionali, al convegno parteciperanno *Luciano Floridi*, *Anna Masera*, *Luca De Biase*, *Marina Miserandino*, *Giorgio Ventre*, *Lorella Zanardo*, *Barbara Carfagna*, *Roberto Baldoni*, *Carlo Blengino*, *Francesca Bosco*, *Stefano Quintarelli*. Le conclusioni del convegno saranno affidate a *Stefano Rodotà*. Maggiori informazioni sul programma sono disponibili sul sito del CINI: https://www.consorzio-cini.it/index.php/it/news-ita/1040-cini-presenta-il-n… . Per partecipare al convegno occorre iscriversi all'indirizzo: http://cini-laboratorio.eventbrite.com/ (ingresso libero fino ad esaurimentoposti). La locandina in versione PDF è disponibile all'indirizzo: https://www.consorzio-cini.it/index.php/it/component/attachments/download/5… . Cordiali saluti, -- ------------------------------------------------- Giuseppe Futia Communication Manager Nexa Center for Internet & Society Politecnico di Torino - DAUIN Corso Duca degli Abruzzi, 24 - 10129 Torino web: http://nexa.polito.it mail: giuseppe.futia(a)polito.it tel. +39 011 090 7219

1 2