[{"description":"dc.contributor.author: Gonzalez Fernandez, Nadia dc.date.issued: 2026-10 dc.description.abstract: La diversité logicielle contribue à améliorer la fiabilité et la sécurité des systèmes depuis les années 1960, notamment gr'ce à des modèles dans lesquels une autorité centrale mandate et certifie des implémentations indépendantes. Au cours de la dernière décennie, Ethereum a déployé la diversité à grande échelle sous une forme nouvelle : 11 clients indépendants y coexistent sans être mandatés ni certifiés par une autorité centrale, tout en bénéficiant de la diversité déjà présente dans l’écosystème open source. Cette thèse étudie Ethereum comme un exemple de ce modèle émergent de diversité logicielle, en examinant son adoption, son étendue dans le code des clients et les défis qu’elle soulève. Nous combinons des entretiens semi-directifs avec sept contributeurs impliqués dans le développement, la coordination et le suivi de la diversité des clients, avec la première analyse statique complète de la chaîne d’approvisionnement logicielle des 11 clients les plus utilisés. Deux principaux résultats se dégagent. Premièrement, la communauté Ethereum veille activement au maintien de cette diversité au moyen d’une spécification commune, d’un suivi continu de la distribution des clients, de financements dédiés et d’interventions visant à limiter leur concentration. Deuxièmement, notre analyse montre que cette diversité s’étend au code : huit moteurs de bases de données indépendants sont utilisés par les 11 clients, tandis que les équipes convergent volontairement vers les composants les plus difficiles à implémenter correctement et privilégient leur audit plutôt que la multiplication d’alternatives non vérifiées. Ainsi, Ethereum constitue un exemple de diversité logicielle étendue et activement entretenue par sa communauté.; Software diversity has improved reliability and security in systems since the 1960s, through models in which a central authority commissions and certifies independent implementations. Over the last decade, Ethereum has deployed diversity at scale in a new form: 11 independent clients coexist without any central authority commissioning or certifying them, while also leveraging the diversity already present in the open-source ecosystem. This thesis studies Ethereum as a case of this emerging software diversity model, asking how such diversity is adopted, how far it reaches into client code, and what challenges it introduces. We combine semi-structured interviews with seven contributors who build, coordinate, and monitor client diversity with the first comprehensive static analysis of the software supply chain of the 11 most widely used clients. Two results follow. First, the Ethereum community actively cares for and sustains its client diversity: interviewees describe coordination through a shared specification, continuous monitoring of client distribution, dedicated funding, and intervention against client concentration. For example, when Prysm exceeded 60% of the consensus layer, the community organized a campaign to redistribute validators away from it. Second, our supply chain analysis confirms that this diversity extends into the codebase: eight independent database engines back the 11 clients, and teams deliberately converge on the components hardest to implement correctly, funding their audit rather than multiplying unverified alternatives. Ethereum exhibits extensive software diversity that its community actively cares for and maintains. This sets an","pubDate":"Wed, 14 Oct 2026 08:14:30 +0200","id":3215934,"titre":"State of software diversity in ethereum","url":"https://hdl.handle.net/1866/46704","source":"Faculté de droit Travaux récents"},{"url":"https://osha.europa.eu/en/about-eu-osha/press-room/eu-osha-moves-new-headquarters-bilbaos-bat-tower-presence-european-commission-executive-vice-president-roxana-minzatu","source":"OSHA","description":"The European Agency for Safety and Health at Work (EU-OSHA) today inaugurated its new offices in the BAT (B Accelerator Tower), in a ceremony presided over by the European Commission Executive Vice-President for Social Rights and Skills, Quality Jobs and Preparedness, Roxana Mînzatu . Also taking part in the event were William Cockburn , Executive Director of EU-OSHA; Mikel Torres , Deputy First Minister and Minister of Economy, Labour and Employment of the Basque Government; Ainara Basurko , Provincial Councillor for Economic Promotion and First Deputy General; and Amaia Arregi , First Deputy Mayor and Counsellor for Security at the Bilbao City Council. During the inauguration, European Commission Executive Vice-President Roxana Mînzatu highlighted that EU-OSHA’s new headquarters in the BAT marks the beginning of a new chapter for the Agency, which has been based in Bilbao since 1996 and has become Europe’s reference point for occupational safety and health. She noted that the building symbolises values such as innovation, sustainability and openness to the future, which define both EU-OSHA and the European project. Mînzatu underlined that the rapid changes taking place in the world of work create opportunities but also new risks, and stressed the importance of prevention, evidence-based policies and cooperation among institutions, businesses, researchers and workers. She also highlighted EU-OSHA’s role in identifying emerging risks and promoting good practices, recalling that occupational safety and health should be viewed as an investment in people and in Europe’s competitiveness. The Executive Vice-President further stated that the Agency’s new headquarters reflect a competitive and socially responsible Europe, capable of combining innovation, economic growth and the protection of people. Finally, she thanked the European, Spanish, Basque and local authorities for their support and acknowledged the contribution of EU-OSHA staff to creating safer and healthier workplaces across Europe. View the photo","id":3132682,"pubDate":"Thu, 03 Sep 2026 16:29:20 +0200","titre":"EU-OSHA moves to new headquarters in Bilbao’s BAT Tower in the presence of European Commission Executive Vice-President Roxana Mînzatu"},{"url":"https://www.ftc.gov/news-events/news/press-releases/2026/06/ftc-data-show-people-reported-losing-3-point-5-billion-imposter-scams-2025","source":"Federal Trade Commission - Protecting America's Consumers","id":2959787,"pubDate":"Tue, 16 Jun 2026 08:09:40 +0200","titre":"FTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025","description":"New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020. FTC data also show that people reported imposter scams more than any other fraud category in 2025—nearly one in three fraud reports were about imposter scams. These scams lured consumers through text, phone, email, social media, search engine results and other means. Some of the costliest impersonation scams start with a fake security alert, often from a bank. People are convinced to move money to “protect” it, with their losses often limited only by their available funds. Last year, people reported losing nearly $1 billion to business impersonators with the highest reported losses to bank impersonators—and about $920 million to government impersonators, up from $866 million and $789 million respectively in 2024. The FTC has seen a striking increase in reported fraud losses to all types of fraud—about $16 billion was reported lost in 2025, the highest on record and an increase of about 25% compared to the 2024 figure. “Consumers derive enormous benefits from competitive markets built on truthful information. But fraud undermines that foundation, impeding the market process and preventing markets from operating efficiently,” said Christopher Mufarrige, Director of the Bureau of Consumer Protection. “The FTC will use every tool available to combat one of the most pernicious forms of fraud—government and business impersonation—and to protect the integrity of the digital economy.” The data underscore the importance of the FTC’s work with the  Elder Justice Coordinating Council (EJCC) , which is working to help raise awareness of imposter scams and other scams impacting older adults as well as other consumers. This year, the FTC, along with the Department of Justice, Department of Health and Human Services and members of the EJCC, is leading the Never Ever campaign, a public-private coordinated consumer education effort to raise awareness of government and business imposter scams. In addition to the federal agency members of the EJCC , the campaign also includes private sector representatives such as the American Bankers Association, USTelecom, Google and Microsoft. To help the public spot imposter scams, EJCC members launched the Never Ever campaign, which is aimed at promoting messaging on the key actions that government and businesses will Never Ever take. The Never Ever campaign will run from June 15 to June 26, in conjunction with World Elder Abuse Awareness Day. This first-of-its-kind public-private partnership includes participants from a wide range of organizations and is aimed at directing consumers to a website that includes information and resources to help them avoid imposter scams and what to do if they spot one. Enforcement Actions To help combat impersonation scams, the FTC in 2024 finalized the Impersonation Rule. The Rule gives the agency stronger tools to combat and deter scammers who impersonate government agencies and businesses, enabling the FTC to file federal court cases seeking to get money back to injured consumers and civil penalties against rule violators. Since then, the FTC has vigorously enforced the rule and brought a dozen enforcement actions that have resulted in halting imposter schemes and obtained over $70 million in redress for consumers. In 2025, the FTC brought law enforcement actions under the Impersonation Rule against:  American Tax Service (IRS imposter scheme);  MediaAlpha (government imposter scheme to sell health insurance);  Click Profit (business imposter money making scam);  Blackstone Legal (phantom debt business imposter scheme) and  Accelerated Debt Settlement (government and business imposter scheme that targeted older adults for debt relief). More recently, the  FTC filed a complaint against Innovative Partners in April 2026 , alleging the operators"},{"source":"Federal Trade Commission - Protecting America's Consumers","url":"https://www.ftc.gov/news-events/news/press-releases/2025/12/ftc-will-require-illusory-systems-return-money-stolen-hackers-implement-information-security-program","titre":"FTC Will Require Illusory Systems to Return Money Stolen by Hackers and Implement an Information Security Program","id":2577895,"pubDate":"Wed, 17 Dec 2025 09:50:37 +0100","description":"The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for receiving and addressing vulnerability reports and responding to security incidents; and utilize widely known technologies that might have helped mitigate consumer losses. According to the complaint, in June 2022, Nomad introduced inadequately tested code that included a significant vulnerability. Just over a month later, hackers began exploiting the vulnerability. The FTC alleged that Nomad failed to respond to the attack in time because of its inadequate security and incident response measures, which led to the loss of $186 million. The company was able to recover some money, but consumers lost approximately $100 million. Nomad was warned about the dangers of inadequate testing as well as the need to ensure it had adequate staff and security in place. The company, however, failed to implement basic safety measures that would mitigate consumer losses, the FTC alleged. Under the proposed order , Nomad will be prohibited from making misrepresentations about its security practices. In addition, the company will also be required to: Implement a comprehensive information security program that is designed to protect consumers from theft or other unauthorized access and address the security issues outlined in the FTC’s complaint; Obtain biennial assessments of its information security program by an independent third party and cooperate with the third-party assessor; and Return to consumers money recovered following the security breach that was not already returned to customers. The Commission voted 2-0 to accept the proposed complaint and order for public comment. The FTC will publish a description of the consent agreement package in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE:  The Commission issues an administrative complaint when it has “reason to believe” that the law has been or is being violated, and it appears to the Commission that a proceeding is in the public interest. When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to $51,744. The lead staff attorneys on this matter are M. Hasan Aijaz and Julia Horwitz with the FTC’s Bureau of Consumer"}]