- nexa - server-nexa.polito.it

Ars: "The NSA's SKYNET program may be killing thousands of innocent people"
by J.C. DE MARTIN Feb. 16, 2016

Feb. 16, 2016

*The NSA’s SKYNET program may be killing thousands of innocent people* /"Ridiculously optimistic" machine learning algorithm is "completely bullshit," says expert.// / By Christian Grothoff & J.M. Porup Feb 16, 2016 In 2014, the former director of both the CIA and NSA proclaimed that "we kill people based on metadata." Now, a new examination of previously published Snowden documents suggests that many of those people may have been innocent. Last year, The Intercept published documents detailing the NSA's SKYNETprogramme. According to the documents, SKYNET engages in mass surveillance of Pakistan's mobile phone network, and then uses a machine learning algorithm on the cellular network metadata of 55 million people to try and rate each person's likelihood of being a terrorist. […] Continua qui: <http://arstechnica.co.uk/security/2016/02/the-nsas-skynet-program-may-be-ki…>

1 0

"Cybercrime, Hacker e protezioni delle informazioni" - Oggi ore 19.45, RonchiVerdi (Torino)
by Giuseppe Futia Feb. 16, 2016

Feb. 16, 2016

Gentilissimi, siamo lieti di segnalarvi che oggi alle ore 19.45 presso i RonchiVerdi, corso Moncalieri 466 a Torino, si svolgerà il workshop: "Cybercrime, Hacker e protezioni delle informazioni: come proteggerci e come proteggere le nostre aziende" Tra gli ospiti dell'incontro ci sarà Mauro Alovisio, fellow del Centro Nexa su Internet & Società. Maggiori informazioni sono disponibili in calce. Cordiali saluti, [image: Inline images 3] *TORINOIN Business Social Network *è lieta di invitarvi alla serata: *“Cybercrime, Hacker e protezioni delle informazioni:* *come proteggerci e come proteggere le nostre aziende”* *Martedì 16 febbraio 2016, ore 19.45* *ai RonchiVerdi in Corso Moncalieri 466 a Torino* Carissimi Il tema della sicurezza informatica è diventato importantissimo a livello personale, familiare ed anche aziendale in quanto informazioni spesso riservate viaggiano quotidianamente sulla rete mettendo a rischio sia la privacy individuale che le strategie di business spesso vitali per l’evoluzione delle aziende. Abbiamo organizzato una serata per affrontare a 360 gradi il tema della Sicurezza Informatica invitando con due ospiti di eccezione, competenti e riconosciuti a livella nazionale ed internazionale: - l’avvocato *Mauro Alovisio* con il quale affronteremo gli aspetti normativi, legali e giuridici (ha partecipato con un contributo critico associativo al documento "Italian Cyber Security Report 2015 - Un Framework Nazionale per la Cyber Security” presentato a Roma presso La Sapienza in data 4 febbraio 2016 ) - l’esperto di sicurezza ed ex-hacker *Raoul Chiesa* il quale ci permetterà di avere una visione generale su come la criminalità tenta di utilizzare in modo fraudolento le informazioni, quali pericoli corriamo e quali sono le organizzazioni preposte alla difesa della sicurezza informatica. *Profilo di Mauro Alovisio* *Avvocato presso lo Staff Legale e Avvocatura dell’Università degli Studi di Torino, è specializzato in protezione dei dati personali e diritto delle nuove Tecnologie.* *E’ fellow del Centro di ricerca Nexa (https://nexa.polito.it/ <https://nexa.polito.it/> ) e Presidente dell’associazione Centro Studi di Informatica Giuridica di Ivrea-Torino (www.csigivreatorino.it <http://www.csigivreatorino.it/> ) nonché formatore e autore di pubblicazioni in materia di privacy, videosorveglianza, controlli sui lavoratori in azienda (Ipsoa, Maggioli, Giuffrè, Experta).* *Ha partecipato a diverse consultazioni in materia di cybercrime, droni, open data e anticorruzione.* *Profilo di Raoul Chiesa* *Raoul "Nobody" Chiesa, nato a Torino nel 1973, è Socio Fondatore e Presidente di Security Brokers SCpA. Dopo essere stato tra i primi hacker italiani a cavallo tra gli anni '80 e '90, nel 2012 fonda “Security Brokers», un "think-tank" altamente innovativo nel mondo dell'Information Security Consulting di alta fascia, una "cooperativa di cyber esperti" con background molto differenti, di nicchia ed altamente complementari.* *Raoul è uno dei maggiori e più riconosciuti esperti a livello mondiale dell’InfoSecurity ed è arrivato a ricoprire importanti ruoli presso diverse Associazioni, Enti e security community, sia nazionali che internazionali: nel 2000 è uno dei soci fondatori del CLUSIT (Associazione Italiana per la Sicurezza Informatica), dal 2002 è membro del Comitato Direttivo dell'ISECOM e del Board dell'OWASP Italian Chapter, è stato per tre anni tra i coordinatori del Gruppo di Lavoro «Cyber World» presso il CASD/OSN (Centro Alti Studi per la Difesa / Osservatorio per la Sicurezza Nazionale) e membro dell'Osservatorio Italiano Sicurezza & Privacy (AIP/OPSI).* *Nel 2013 viene scelto come coordinatore per l'Italia del capitolo europeo di APWG.EU <http://apwg.eu/> (Anti-Phishing Working Group) e nel 2015 viene eletto nel Consiglio Direttivo dell’AIIC (Associazione Italiana esperti di Infrastrutture Critiche).* *A livello istituzionale, dal 2003 ha iniziato la sua collaborazione con l'agenzia delle Nazioni Unite "UNICRI" (United Nations Interregional Crime and Justice Research Institute), come ideatore del progetto "HPP", l'Hackers Profiling Project, noto in tutto il mondo; oggi il suo ruolo di consulente esterno presso l'UNICRI è quello di "Special Advisor on Cybercrime Issues and Hackers Profiling". Nel 2010 è l’Europa a chiamarlo: Raoul è il primo esperto di sicurezza italiano ad essere selezionato, come membro del PSG (Permanent Stakeholders Group) tramite chiamata «ad personam» dal Direttore della stessa agenzia ENISA, la European Union Network & Information Security Agency; il PSG è un gruppo selezionato di 30 professionisti, provenienti da tutti i Member States dell’EU e con mandato personale di due anni e mezzo.* *Raoul è nel PSG nel biennio 2010-2012 e gli viene poi riconfermato il mandato del 2013-2015; infine, nel luglio del 2015 Raoul sigla il contratto con il Governo francese come Subject Expert per ADETEF (Agenzia speciale che riunisce sei differenti ministeri) all’interno di ENCYSEC (Enhancing Cyber Security), un progetto finanziato dall’Unione Europea, mentre dal settembre dello stesso anno diviene membro del prestigioso Roster of Experts presso l’ITU (International Telecommunication Union, Nazioni Unite) di Ginevra.* *E' autore di numerose pubblicazioni, di settore e generaliste, sia in Italia che all'estero (Apogeo Editore, Feltrinelli, Hoepli, McGrawHill, Taylor&Francis Group/CRC Press, Sperling&Kupfler) ed è ospite in trasmissioni (TV, radio) nazionali ed estere sin dal 1996 (Rai, Mediaset, SKY, BBC, Bloomberg, TV nazionali di diversi Paesi).* Per adesioni inviare una mail entro *lunedì 15 febbraio 2016 *all’indirizzo segreteria.torinoin(a)libero.it *Costo della serata con apericena* *(antipasti, primo, dolce e caffè)**: 15 € per i soci, 20 € per i non soci.* *Vi aspettiamo numerosi !!* Saluti cordiali MARCO TARPI ed il Direttivo di TORINO IN *[image: http://www.jacobacci.com/evt/torinoin/img/testata2b.png]* <http://www.linkedin.com/groups?gid=3506192>*[image: http://www.jacobacci.com/evt/torinoin/img/testata2c.png] <https://www.facebook.com/torinoin>*

1 0

Berkman Center Webcast live oggi ore 18 - Security and Privacy in the World-Sized Web
by Giuseppe Futia Feb. 16, 2016

Feb. 16, 2016

Security and Privacy in the World-Sized Web https://cyber.law.harvard.edu/events/luncheons/2016/02/Schneier <http://cyber.law.harvard.edu/events/luncheon/2014/06/sigal> *with Berkman Fellow, Bruce Schneier* Today, 6.00 pm Webcast live: http://cyber.law.harvard.edu/interactive/webcast http://nexa.polito.it/berkman-webcast-live We've created a world where information technology permeates our economies, social interactions, and intimate selves. The combination of mobile, cloud computing, the Internet Things, persistent computing, and autonomy are resulting in something different. This World-Sized Web promises great benefits, but is also vulnerable to a host of new threats. Threats from users, criminals, corporations, and governments. Threats that can now result in physical damage and even death. This talk looks back at what we've learned from past attempts to secure these systems, and forward at what technologies, laws, regulations, economic incentives, and social norms we need to secure them in the future. About Bruce Bruce Schneier is an internationally renowned security technologist, called a "security guru" by The Economist. He is the author of 12 books -- including the New York Times best-seller "Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World" -- as well as hundreds of articles, essays, and academic papers. His influential newsletter "Crypto-Gram" and blog "Schneier on Security" are read by over 250,000 people. Schneier is a fellow at the Berkman Center for Internet and Society at Harvard University, a board member of the Electronic Frontier Foundation, and an Advisory Board member of the Electronic Privacy Information Center. He is also the Chief Technology Officer of Resilient Systems, Inc.

1 0

Fwd: Directing Italian govt to give its business to Amazon?
by Marco Ciurcina Feb. 15, 2016

Feb. 15, 2016

--------- Messaggio inoltrato --------- Oggetto: Directing Italian govt to give its business to Amazon? Data: venerdì 12 febbraio 2016, 07:32:04 Da: Richard Stallman <rms(a)gnu.org> A: ciurcina(a)studiolegale.it [[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] https://www.amazon.com/p/feature/2xyfsxhpr5vo83f?ref_=aa_lc_0&pf_rd_r=CNSWR… As an Amazon executive he is involved with (1) DRM (Amazon Swindle) (2) products that snoop on their users (Amazon Swindle) (3) proprietary software (Amazon Swindle) (4) inviting organizations to entrust sensitive data to computers run by companies (Amazon servers) (5) inviting organizations to entrust sensitive data to computers run by US companies (Amazon servers) (6) Paying workers 2 dollars an hour (Mechanical Turk). We cannot judge his actions and statements until he does them, but we have grounds to worry that he may encourage the Italian state to go in these directions, which would be very bad. -- Dr Richard Stallman President, Free Software Foundation (gnu.org, fsf.org) Internet Hall-of-Famer (internethalloffame.org) Skype: No way! See stallman.org/skype.html. ------------------------------------------

3 2

accordo UK-USA wiretap order
by Alberto Cammozzo Feb. 13, 2016

Feb. 13, 2016

The British want to come to America — with wiretap orders and search warrants <https://www.washingtonpost.com/world/national-security/the-british-want-to-…> If U.S. and British negotiators have their way, MI5, the British domestic security service, could one day go directly to American companies such as Facebook or Google with a wiretap order for the online chats of British suspects in a counterterrorism investigation. The transatlantic allies have quietly begun negotiations this month on an agreement that would enable the British government to serve wiretap orders directly on U.S. communication firms for live intercepts in criminal and national security investigations involving its own citizens. Britain would also be able to serve orders to obtain stored data, such as emails. The previously undisclosed talks are driven by what the two sides and tech firms say is an untenable situation in which foreign governments such as Britain cannot quickly obtain data for domestic probes because it happens to be held by companies in the United States. The issue highlights how digital data increasingly ignores national borders, creating vexing challenges for national security and public safety, and new concerns about privacy. The two countries recently concluded a draft negotiating document, which will serve as the basis for the talks. The text has not been made public, but a copy was reviewed by The Washington Post. [...] The agreement is intended to be reciprocal, so that the U.S. government could directly request wiretaps or stored data of a British provider as long as the target is American and not a British citizen.

1 0

Diritto di ripubblicazione in ambito scientifico: proposta di modifica alla legge sul diritto d’autore
by Maria Chiara Pievatolo Feb. 13, 2016

Feb. 13, 2016

Salve a tutti. L'Associazione italiana per la promozione della scienza aperta ha elaborato una proposta di modifica all'articolo 42 della legge italiana sul diritto d'autore (http://bfp.sp.unipi.it/aisa/attivita/diritto-di-ripubblicazione-in-ambito-s…) per riconoscere ai ricercatori, come già avviene in Germania e in Olanda e come è in discussione altrove (http://bfp.sp.unipi.it/aisa/attivita/diritto-di-ripubblicazione-in-ambito-s…) il diritto di render liberamente disponibili i propri articoli e saggi usciti ad accesso chiuso e con esplicita cessione del copyright, entro un anno dalla pubblicazione. La stiamo sottoponendo a consultazione pubblica. Se qualcuno ha suggerimenti per migliorarla, può farlo qui: http://bfp.sp.unipi.it/aisa/attivita/diritto-di-ripubblicazione-in-ambito-s… Grazie in anticipo, MC Pievatolo -- Maria Chiara Pievatolo Dipartimento di Scienze politiche Università di Pisa Via Serafini 3 56126 Pisa (Italy) +39 050 2212479 http://btfp.sp.unipi.it https://twitter.com/btfp1 http://www.sp.unipi.it/index.php/en/docenti-top/122-pievatolo-maria-chiara

1 0

"Meet the Robin Hood of Science"
by J.C. DE MARTIN Feb. 12, 2016

Feb. 12, 2016

Meet the Robin Hood of Science bySIMON OXENHAM <http://bigthink.com/users/simonoxenham> * o */The tale of how one researcher has made nearly every scientific paper ever published available for free to anyone, anywhere in the world./* On the evening of November 9th, 1989, the Cold War came to a dramatic end with the fall of the Berlin Wall. Four years ago another wall began to crumble, a wall that arguably has as much impact on the world as the wall that divided East and West Germany. The wall in question is the network of paywalls that cuts off tens of thousands of students and researchers around the world, at institutions that can’t afford expensive journal subscriptions, from accessing scientific research. On September 5th, 2011, Alexandra Elbakyan, a researcher from Kazakhstan, created Sci-Hub, a website that bypasses journal paywalls, illegally providing access to nearly every scientific paper ever published immediately to anyone who wants it. The website works in two stages, firstly by attempting to download a copy from the LibGen database of pirated content, which opened its doors to academic papers in 2012 and now contains over 48 million scientific papers. The ingenious part of the system is that if LibGen does not already have a copy of the paper, Sci-hub bypasses the journal paywall in real time by using access keys donated by academics lucky enough to study at institutions with an adequate range of subscriptions. This allows Sci-Hub to route the user straight to the paper through publishers such as JSTOR, Springer, Sage, and Elsevier. After delivering the paper to the user within seconds, Sci-Hub donates a copy of the paper to LibGen for good measure, where it will be stored forever, accessible by everyone and anyone. […] Continua qui: http://bigthink.com/neurobonkers/a-pirate-bay-for-science

2 1

Schneier: "Security or Surveillance?"
by J.C. DE MARTIN Feb. 12, 2016

Feb. 12, 2016

Security or Surveillance? By Bruce Schneier <https://www.lawfareblog.com/contributors/bschneier> Monday, February 1, 2016, 1:01 PM /Harvard’s Berkman Center for Internet & Society convened an interdisciplinary group to take on vexing questions of surveillance and cybersecurity. The group has now released the report “Don’t Panic <https://cyber.law.harvard.edu/pubrelease/dont-panic/>.” Here, its authors share some individual reflections./ *** Both the “going dark” metaphor <https://www.fbi.gov/news/speeches/going-dark-are-technology-privacy-and-pub…> of FBI Director James Comey and the contrasting “golden age of surveillance” metaphor <https://www.judiciary.senate.gov/imo/media/doc/07-08-15%20Swire%20Testimony…> of privacy law professor Peter Swire focus on the value of data to law enforcement. As framed in the media, encryption debates are about whether law enforcement should have surreptitious access to data, or whether companies should be allowed to provide strong encryption to their customers. It’s a myopic framing that focuses only on one threat — criminals, including domestic terrorists — and the demands of law enforcement and national intelligence. This obscures the most important aspects of the encryption issue: the security it provides against a much wider variety of threats. […] Continua qui: https://www.lawfareblog.com/security-or-surveillance

1 0

Worldwide Review of Encryption Products - by Bruce Schneier et al.
by J.C. DE MARTIN Feb. 12, 2016

Feb. 12, 2016

In this paper, which is modeled on a similar effort in 1999 by researchers from George Washington University, Berkman Fellow Bruce Schneier and collaborator Kathleen Seidel together with Harvard College student Saranya Vijayakuma identify and survey 865 encryption products from 55 different countries, 546 of them from outside the United States. In contrast, the 1999 survey found 805 encryption products from outside the US. Very few products from the earlier survey appear in the new one, indicating much change in this market over the last 17 years. The new survey also identified 587 entities that sell or give away encryption products, and of those, two-thirds are outside the US. Schneier argues in the paper that the survey findings call into question the efficacy of any US mandates forcing backdoors for law-enforcement access. He asserts that they show that anyone who wants to avoid US surveillance has hundreds of competing products to choose from. The report findings indicate that foreign products offer a wide variety of secure applications—voice encryption, text message encryption, file encryption, network-traffic encryption, anonymous currency—providing the same levels of security as US products do today. Additional findings include: * The most common non-US country for encryption products is Germany, with 112 products. This is followed by the United Kingdom, Canada, France, and Sweden, in that order. * The five most common countries for encryption products—including the US—account for two-thirds of the total. But smaller countries like Algeria, Argentina, Belize, the British Virgin Islands, Chile, Cyprus, Estonia, Iraq, Malaysia, St. Kitts and Nevis, Tanzania, and Thailand each produce at least one encryption product. * Of the 546 foreign encryption products we found, 56% are available for sale and 44% are free. 66% are proprietary, and 34% are open source. Some for-sale products also have a free version. * At least 587 entities—primarily companies—either sell or give away encryption products. Of those, 374, or about two-thirds, are outside the US. * Of the 546 foreign encryption products, 47 are file encryption products, 68 e-mail encryption products, 104 message encryption products, 35 voice encryption products, and 61 virtual private networking products. The full paper is available for download as part of the Berkman Publication Series on SSRN at: <http://ssrn.com/abstract=2731160>http://ssrn.com/abstract=2731160.

1 0

U.S. Intel Chief: Smart Home Devices Present "New Opportunities" for Spying
by J.C. DE MARTIN Feb. 11, 2016

Feb. 11, 2016

http://www.democracynow.org/2016/2/10/headlines/us_intel_chief_smart_home_d… jc

1 1