Cari, Seguono stralci dalla RISKS-LIST 31(62) Buona lettura Diego RISKS-LIST: Risks-Forum Digest Saturday 21 March 2020 Volume 31 : Issue 62 ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks) Peter G. Neumann, founder and still moderator ***** See last item for further information, disclaimers, caveats, etc. ***** This issue is archived at <http://www.risks.org> as <http://catless.ncl.ac.uk/Risks/31.62> The current issue can also be found at <http://www.csl.sri.com/users/risko/risks.txt> Contents: [Cleaning up part of the backlog; more to come] Many to blame in fatal crash of a Tesla (Tom Krisher via PGN) [ ... OMISSIS ...] Boeing Culture Concealment 747 Max report (The Guardian) [ ... OMISSIS ...] Live Coronavirus Map Used to Spread Malware (Krebs) [ ... OMISSIS ...] Crimea, Kashmir, Korea -- Google redraws disputed borders, depending on who's looking (WashPost) [ ... OMISSIS ...] Abridged info on RISKS (comp.risks) ---------------------------------------------------------------------- Date: Sat, 21 Mar 2020 12:33:06 PDT From: "Peter G. Neumann" <neumann@csl.sri.com> Subject: Many to blame in fatal crash of a Tesla (Tom Krisher via PGN) Tom Krisher, SFChronicle.com (which as usual ignores the existence of the Science Fiction Chronicle), front page of the Chron's Business Report, 21 Mar 2020, PGN-ed As we have noted in many cases (including Deepwater Horizon RISKS-29.49, the Boeing 737 Max, and many others), attempts to place blame are often frustrated by reality: blame may be widely distributed. The cited article by Tom Krisher notes the National Transportation Safety Board (NTSB) report released on 19 Mar 2020 on the Tesla crash on 1 March 2019 in Delray Beach, Florida. The Tesla was under Autopilot driving at 69 mph when the Autopilot neither braked or otherwise attempted to avoid a tractor-trailer that crossed in its path. The report noted that all of the following factors were relevant: * The driver of the Tesla for not paying attention. He had turned the Autopilot on just 12.3 seconds before impact. Autosteer (which keeps the car centered in its lane) turned on 2.4 seconds later. * The driver (who was not injured) of the tractor-trailer, which sheared off the roof of the Tesla * Tesla, because it allowed the driver to avoid paying attention to the Autopilot, and to limit where it was safe to use the Autopilot, activating it in conditions for which it was not designed. (However, Tesla told the NTSB investigators that ``forward collision warning and automatic emergency braking systems on Model 3 in the Delray cash weren't designed to activate for crossing traffic or to prevent crashes at high speeds.'' Tesla also had noted that the driver wasn't warned about not having his hands on the wheel ``because the approximate 6-second duration was too short to trigger a warning under the circumstances.'' However, Tesla also claims that ``the Autopilot is a driver-assist system, and that drivers must be ready to intervene at all times.'' * The National Highway Traffic Safety Administration (NHTSA) for its lax regulations, and failing to put limits on the use of automated driving systems to just those cases in which they were designed to work A statement for the NTSB chairman Robert Sumwalt noted this was the ``third fatal vehicle crash we have investigated where a driver's overreliance on Tesla's Autopilot and the operational design of the Tesla's Autopilot have led to tragic consequences.'' Krisher notes that the Delray Beach crash was remarkably similar to one in Williston FL in 2016, which also killed the driver of a Tesla. ------------------------------ [ ... OMISSIS ...] ------------------------------ Date: Sat, 7 Mar 2020 12:47:02 PST From: "Peter G. Neumann" <neumann@csl.sri.com> Subject: Boeing Culture Concealment 747 Max report (The Guardian) https://www.theguardian.com/business/2020/mar/06/boeing-culture-concealment-... https://transportation.house.gov/imo/media/doc/TI%20Preliminary%20Investigat... ------------------------------ [ ... OMISSIS ...] ------------------------------ Date: Sun, 15 Mar 2020 16:24:01 -0400 From: Monty Solomon <monty@roscom.com> Subject: Live Coronavirus Map Used to Spread Malware https://krebsonsecurity.com/2020/03/live-coronavirus-map-used-to-spread-malw... ------------------------------ [ ... OMISSIS ...] ------------------------------ Date: Sun, 8 Mar 2020 14:53:02 -0400 From: Gabe Goldberg <gabe@gabegold.com> Subject: Crimea, Kashmir, Korea -- Google redraws disputed borders, depending on who's looking (WashPost) The Silicon Valley firm alters maps under political pressure and the inscrutable whims of tech executives https://www.washingtonpost.com/technology/2020/02/14/google-maps-political-b... The risk? War... ------------------------------ [ ... OMISSIS ...] ------------------------------ Date: Mon, 14 Jan 2019 11:11:11 -0800 From: RISKS-request@csl.sri.com Subject: Abridged info on RISKS (comp.risks) The ACM RISKS Forum is a MODERATED digest. Its Usenet manifestation is comp.risks, the feed for which is donated by panix.com as of June 2011. => SUBSCRIPTIONS: The mailman Web interface can be used directly to subscribe and unsubscribe: http://mls.csl.sri.com/mailman/listinfo/risks => SUBMISSIONS: to risks@CSL.sri.com with meaningful SUBJECT: line that includes the string `notsp'. Otherwise your message may not be read. *** This attention-string has never changed, but might if spammers use it. => SPAM challenge-responses will not be honored. Instead, use an alternative address from which you never send mail where the address becomes public! => The complete INFO file (submissions, default disclaimers, archive sites, copyright policy, etc.) is online. <http://www.CSL.sri.com/risksinfo.html> *** Contributors are assumed to have read the full info file for guidelines! => OFFICIAL ARCHIVES: http://www.risks.org takes you to Lindsay Marshall's searchable html archive at newcastle: http://catless.ncl.ac.uk/Risks/VL.IS --> VoLume, ISsue. Also, ftp://ftp.sri.com/risks for the current volume or ftp://ftp.sri.com/VL/risks-VL.IS for previous VoLume If none of those work for you, the most recent issue is always at http://www.csl.sri.com/users/risko/risks.txt, and index at /risks-31.00 Lindsay has also added to the Newcastle catless site a palmtop version of the most recent RISKS issue and a WAP version that works for many but not all telephones: http://catless.ncl.ac.uk/w/r ALTERNATIVE ARCHIVES: http://seclists.org/risks/ (only since mid-2001) *** NOTE: If a cited URL fails, we do not try to update them. Try browsing on the keywords in the subject line or cited article leads. Apologies for what Office365 and SafeLinks may have done to URLs. ==> Special Offer to Join ACM for readers of the ACM RISKS Forum: <http://www.acm.org/joinacm1> ------------------------------ End of RISKS-FORUM Digest 31.62 ************************ -- Dott. Diego Latella - Senior Researcher - CNR/ISTI, Via Moruzzi 1, 56124 Pisa, IT (http:www.isti.cnr.it [1]); FM&&T Laboratory (http://fmt.isti.cnr.it) http://www.isti.cnr.it/People/D.Latella - phone: +39 0503152982 - mob: +39 348 8283101 - fax +39 0503152040 Links: ------ [1] http://www.isti.cnr.it