🇪🇺 EU Kids Act: Bruxelles mette sul tavolo una bozza di 99 pagine, venduta come "spazi digitali più affidabili" e come risposta alla crisi dei minori online. 👉 youtube.com/watch?v=Ki0t6SV6… Tre le soglie previste: under 13 esclusi da social e piattaforme video, 13-15 con account supervisionato, 15+ via libera. Più un pacchetto "safety by design" contro design compulsivo, dark pattern e raccomandazioni nocive. Il problema è che la norma sembra solo un esercizio di soluzionismo tecnologico. Sposta una questione sociale e politica su checklist di conformità e impostazioni predefinite, senza toccare la "chimica" del feed né gli incentivi economici del modello pubblicitario. La verifica dell'età diventa il perno, e non un controllo "solo dei minori": è un'infrastruttura di identificazione potenzialmente pervasiva per tutti, con la promessa fragile di soluzioni zero-knowledge. E dentro ci finiscono anche gli AI companions. Invece di una scelta politica netta, si chiede ai prodotti di non fare ciò per cui sono progettati (attaccamento e dipendenza emotiva), delegando tutto alla compliance. E l'enforcement ricade su autorità già sotto organico (coordinatori DSA) e su app store chiamati a fare anche i giudici dell'età, un'architettura che rischia più sorveglianza e profilazione, non più protezione. Una "codarda manovra paracula", di soluzionismo puro, che alimenta le scartoffie di compliance. E che getta le basi di un'architettura di sorveglianza. Ne parliamo oggi, su Ciao Internet #EUKidsAct #VerificaEtà #DigitalServicesAct #techpolicy

Qui potrebbe esserci qualcosa di interessante a livello di IOC sul caso #Revolut (e forse non solo) A proposito di PEC...

‼️ BREAKING: The Revolut hacker has shared with Duel's investigation team, for the first time, a complete video showing the scale of his information treasure trove. Multiple celebrities are included in the leaks. The hacker plans to announce his ransom demands today. Here's everything we know about the case so far: - As we established in our previous posts, the hacker gained access to an Italian government email address through an infostealer. - Over the course of several months, using fake European Investigation orders, the hacker would submit large numbers of cryptocurrency transaction IDs to Revolut asking for all personal information associated with the accounts to be sent over. Revolut complied, sending hundreds of files, all belonging to high value crypto holders or transferors. - The hacker's goal was to obtain high value crypto targets. This has various potential use cases in the cyber criminal world, such as online social engineering, conducting IRL robberies, reselling the information to other criminal groups, or blackmailing Revolut directly. - The hacker says that any individual can "buy themselves" out of the data leaks. He will be publishing the ransom note without 24 hours outlining his demands from Revolut. We do not currently know what amount he will be demanding. - We asked the hacker if he feels bad about what he did and the effects this will have on victims and their privacy. His reply was: "If the ransom is not paid, then the data will be sold, and their blood will be on Revolut's hands, not mine." - A member of the hacking group known as "Smilik" had a falling out with Villain. They splintered into two channels, each one claiming to be the hacker. Smilik was unable to provide our team with sufficient evidence proving he was the original hacker. Villain provided videos, original emails with attachments, and proof that he had originally sent a subset of files to Smilik. We are satisfied that Villain is the original hacker and that his narrative is consistent. - The hacker will be contacting other journalists and investigation groups today to release the same information, allowing for the existence of the files and authenticity of the emails to be independently corroborated - Our team is under the impression that this is an amateur group that got lucky due to Revolut's lack of checks and continued incompetence over several months. This does not seem to be a professionally organized hacking group. - The partial files sent to us contained details of a famous Swedish singer and Idol finalist, a prominent Armenian academic, an Indian cricket star, and several founders and CEOs. To balance public disclosure with user privacy, our team redacted every piece of personal information from the original video before publication. We have also deleted the original information from our end. - Our understanding is that the files sent to us were just one of dozens. Each file, which comes with full banking and transaction history, would allow hackers to establish the target's daily spending patterns, location data, people they send money to (likely family, employees, or other close contacts) and more, leading to highly damaging personal disclosures. We are releasing this information in the interest of public transparency. The breach is real, and Revolut was not forthcoming enough about it in enough time. We hope Revolut takes all legal and necessary steps available to them to prevent this data from being either publicly released or sold to criminal groups, as it would be highly damaging and disastrous for victims involved. This is most of what we have for now. We'll keep an eye for any further updates, including when the ransom demand comes out.