Start up: app retention rates, the real FBI-Apple court problem, Samsung closing Milk Music?, and more

Steve Jobs’s desire to push books on the iPad led to an antitrust finding against Apple. Screenshot by tuaulamac on Flickr.

You can now sign up to receive each day’s Start Up post by email. You’ll need to click a confirmation link, so no spam.

A selection of 9 links for you. Aren’t they? I’m charlesarthur on Twitter. Observations and links welcome.

Apple, FBI, and the burden of forensic methodology » Zdziarski’s Blog of Things

Jonathan Zdziarski is a forensics expert who has testified in court cases and designed his own computer forensics tools. He says that even if Apple is forced to write the software to crack the iPhone PIN, it will need to be examinable in court:

»Full documentation must be written that explains the methods and techniques used to disable Apple’s own security features. The tool cannot simply be some throw-together to break a PIN; it must be designed in a manner in which its function can be explained, and its methodology could be reproduced by independent third parties. Since FBI is supposedly the ones to provide the PIN codes to try, Apple must also design and develop an interface / harness to communicate PINs into the tool, which means added engineering for input validation, protocol design, more logging, error handling, and so on. FBI has asked to do this wirelessly (possibly remotely), which also means transit encryption, validation, certificate revocation, and so on.

Once the tool itself is designed, it must be tested internally on a number of devices with exactly matching versions of hardware and operating system, and peer reviewed internally to establish a pool of peer-review experts that can vouch for the technology. In my case, it was a bunch of scientists from various government agencies doing the peer-review for me. The test devices will be imaged before and after, and their disk images compared to ensure that no bits were changed; changes that do occur from the operating system unlocking, logging, etc., will need to be documented so they can be explained to the courts. Bugs must be addressed. The user interface must be simplified and robust in its error handling so that it can be used by third parties.

«

Trivial, huh?
link to this extract

 


April 2015: Meerkat & Periscope: features, not products » Tech-Thoughts

Sameer Singh, writing almost a year ago when the two streaming apps were just taking off:

»Both Meerkat and Periscope leverage smartphone cameras to broadcast live video. However, the apps themselves don’t play a major role in the discovery of these broadcasts. This may be because they are too specialized to generate sustained engagement, at least enough to be a discovery platform (most app users are likely to be broadcasters). Also, it is relatively easy to replicate the feature set and user experience of a Meerkat or a Periscope, but it is very difficult to enable discovery. Therefore, these apps are not products in their own right, but just features built on top of broadcast-oriented social platforms, i.e. those that facilitate one-to-many communication (e.g. Twitter).

On a standalone basis, these apps have a limited shelf life — they could either be acquired by social platforms that fit the description above or be killed by them. Therefore, it isn’t surprising that Meerkat found viral success by leveraging Twitter’s social graph. Any incumbent’s response in this situation would be to build or acquire a similar feature set. Twitter chose to acquire.

«

And this month: Meerkat announces that it’s going to pivot to being a “video social network” instead.

Not just a feature, but a very niche feature.
link to this extract

 


Driverless lorry convoys to be trialled in the UK » Ars Technica UK

Sebastian Anthony:

»Convoys of automated lorries will be trialled on UK motorways, chancellor George Osborne is expected to announce in his 2016 Budget speech later this month.

The Times reports that the trials will take place on a northerly stretch of the M6, which runs from Birmingham all the way up to the border of Scotland, near Carlisle. The Department for Transport confirms that planning for “HGV platoons” is under way, though it did not comment on whether the trials will receive funding in the Budget, nor give any kind of timeline for the fleet’s deployment.

A DfT spokesman said: “We are planning trials of HGV platoons—which enable vehicles to move in a group so they use less fuel—and will be in a position to say more in due course.” The Times reports that these platoons could consist of up to 10 driverless lorries, each just a few metres away from each other.

The DfT’s “less fuel” claim refers to “drafting,” where the first lorry in the platoon creates a slipstream, significantly reducing drag and fuel consumption for the other lorries behind it. In a semi-automated lorry demo a couple of years ago, the fuel economy for a platoon of lorries improved by about 15%. Expand that out to the thousands of trucks that are on UK roads at any one time and you’re looking at potentially huge cost reductions.

«

link to this extract

 


Supreme Court rejects Apple e-books price-fixing appeal » Reuters

Lawrence Hurley:

»The U.S. Supreme Court on Monday declined to hear Apple Inc’s challenge to an appellate court decision that it conspired with five publishers to increase e-book prices, meaning it will have to pay $450m as part of a settlement.

The court’s decision not to hear the case leaves in place a June 2015 ruling by the New York-based 2nd U.S. Circuit Court of Appeals that favored the U.S. Department of Justice and found Apple liable for engaging in a conspiracy that violated federal antitrust laws.

Apple, in its petition asking the high court to hear the case, said the June decision by the 2nd U.S. Circuit Court of Appeals in New York upholding a judge’s ruling that Apple had conspired with the publishers contradicted Supreme Court precedent and would “chill innovation and risk-taking.”

«

One of those instances where Steve Jobs (who created the antitrust situation while trying to kickstart iPad sales by getting iBooks competitive with Amazon, but without the pain of competing on price) really overreached. And the irony? It turns out retail e-books aren’t a particularly strong driver of iPad sales.
link to this extract

 


Facebook pulls plug on ad software » The Information

Cory Weiberg:

»Last year, Facebook tested software that would represent a bold expansion of its display ads business beyond its own inventory, a move potentially worth billions in revenue. Using a demand-side platform, or a DSP, marketers would be able to use Facebook users’ identity data to bid on ad slots across the mobile and desktop Internet in real time.

But Facebook recently yanked the bidding software from service because the tests showed that banner ads that were served attracted too many fraudulent impressions by bots trawling the Web, the company confirmed to The Information on Friday.

While Facebook’s current advertising business centers mostly on its own mobile inventory and apps plugged into its ad network, many in the industry have been awaiting its plunge into the mobile web’s programmatic ad marketplace. Its ad server, Atlas, which on Monday added capabilities to serve video ads and track offline purchases, can measure whether users saw ads across digital devices. But because of the pulled DSP tests, the ad server doesn’t yet have a bidding platform that would expand its pool of marketing clients wanting to tap this programmatic marketplace.

«

Google dominates the banner ad space via DoubleClick, but one has to wonder whether it sees the same level of bot trawling; if it does, how does it stop it better than Facebook? Is it just about having more experience?
link to this extract

 


“Google Posts” embeds a one-way social network directly into search results » Ars Technica

Ron Amadeo:

»There’s a weird new feature popping up in Google search results called “Google Posts.” It seems to be a place for Google to directly host content in a post-Google+ world and to embed this content directly into search results. Imagine orphaned Google+ posts with the Google+ branding stripped out, and you’re most of the way there.

Over at Google.com/posts, Google has a landing page for this feature, calling it “an experimental new podium on Google” that allows you to “hear directly from the US presidential candidates in real time on Google.” It’s a believable explanation until you see this Google Posts profile from “Andrew Jewelers” in Buffalo, New York, (spotted by Mike Blumenthal), which is definitely not a presidential candidate.

The landing page says the “experimental” feature is “only available to the 2016 US presidential candidates” (Andrew Jewelers for president!), but those of us not running for office can join a waitlist as Google plans to “make it available to other prominent figures and organizations.”

It really seems like this is a Google+ reboot just for brands. The design definitely seems like Google+ with the Google+ branding stripped out, but this “social network” explicitly dodges being “social” AND any kind of “networking.”

«

Sort-of sponsored content in search results?
link to this extract

 


Expect lots more publishers to start asking people to turn off their ad blockers » Business Insider

Lara O’Reilly:

»The US digital advertising trade body, the Interactive Advertising Bureau (IAB,) has released advice to publishers on how they should deal with the growing number of ad blocker users visiting their sites.

The IAB wants publishers to “DEAL” with it, by taking these four steps:

• D: detect ad blocking, in order to initiate a conversation (The IAB also released an ad blocking detection script for its members to add to their websites on Monday.)

• E: explain the value exchange that advertising enables.

• A: ask for changed behavior in order to maintain an equitable exchange.

• L: lift restrictions or Limit access in response to consumer choice.

In other words, it looks like far more websites are going to start asking users to turn off their ad blocker or pay some sort of subscription or make a micropayment in order to access their content.

«

M-i-c k-e-y m-o-u-s-e acronyms are nice, but it’s a big risk to take that people actually do love your content so very much that they’ll take all those ads once more, having stopped. Or will publishers and advertisers just dial back on the ads only for adblocking users? Or for everyone? The inconsistencies multiply.
link to this extract

 


Milk Music may shut down as Samsung eyes Tidal [update: doesn’t eye Tidal] » Variety

Janko Roettgers:

»Samsung is likely going to shutter its Milk Music streaming service in the near future as part of a bigger revamp of its music strategy, Variety has learned from multiple sources. However, Samsung denied rumors that it was going to buy Jay Z’s Tidal service in a statement sent to Variety Friday hours after the original publication of this story.

The shut-down would come two years after Samsung unveiled Milk Music with big fanfare as a competitor to Pandora. The service, which offers consumers personalized radio stations, had initially been exclusive to owners of select mobile devices made by the company. Samsung later opened up Milk Music on the Web, and brought it to its smart TVs as well, but never released apps for phones from other manufacturers.

Milk Music was initially meant to be part of a bigger move toward a new generation of media services that would add value to Samsung devices while also adding incremental advertising and subscription revenue to Samsung’s bottom line. As part of that strategy, Samsung launched Milk Video as a platform for short-form video content in late 2014. There had been plans to branch out with the Milk brand into sports and other forms of entertainment as well.

But late last year, Samsung shuttered Milk Video after it failed to gain traction with consumers. Now, it looks like Milk Music may be heading for a similar shut-down.

«

Roettgers was first with the story about Milk Video shutting down. Samsung Milk Music has over 10m downloads on Google Play and a high rating (4.3).

But again, Samsung just can’t seem to make up its mind what it wants to do beyond hardware. Chat service? It closed Chaton. Video service? Closed Milk Video. Music service? … Oh well.
link to this extract

 


New data shows losing 80% of mobile users is normal, and why the best apps do better » andrewchen

Andrew Chen and Ankit Jain:

»The first graph shows a retention curve: The number of days that have passed since the initial install, and what % of those users are active on that particular day. As my readers know, this is often used in a sentence like “the D7 retention is 40%” meaning that seven days after the initial install, 40% of those users was active on that specific day.

The graph is pretty amazing to see:

Based on Quettra’s data, we can see that the average app loses 77% of its DAUs [daily active users] within the first 3 days after the install. Within 30 days, it’s lost 90% of DAUs. Within 90 days, it’s over 95%. Stunning. The other way to say this is that the average app mostly loses its entire userbase within a few months, which is why of the >1.5 million apps in the Google Play store, only a few thousand sustain meaningful traffic. (*Tabular data in the footnotes if you’re interested)

Ankit Jain, who collaborated with me on this essay, commented on this trend: “Users try out a lot of apps but decide which ones they want to ‘stop using’ within the first 3-7 days. For ‘decent’ apps, the majority of users retained for 7 days stick around much longer. The key to success is to get the users hooked during that critical first 3-7 day period.”

«

The graph for top 10 apps, by contrast, shows them at over 50% retention even after 90 days. Data via 125m Android devices worldwide, and excluding Google’s own apps.
link to this extract

 


Errata, corrigenda and ai no corrida: none notified.

Start up: the Foodpanda takeaway scam, watch iOS 9 grow!, 2 billion lines of Google, and more


“Hi! You look like you want an (artificially) intelligent conversation!” Photo by RomitaGirl67 on Flickr.

You can now sign up to receive each day’s Start Up post by email. You’ll need to click a confirmation link, so no spam.

A selection of 9 links for you. May cause. I’m charlesarthur on Twitter. Observations and links welcome.

Mixpanel Trends » Mixpanel Mobile Analytics

The link is to the iOS 9 adoption curve from Mixpanel; it’s live, so when you click through it’ll be the latest figures. At the time of writing, three hours after iOS 9 went live, its adoption was at 3.2%, against 7.2% for “older than iOS 8” and 89.6% for iOS 8. (Apple’s own stats on September 14 were 87% iOS 8, 11% iOS 7, 2% earlier.)
link to this extract


The trouble with Foodpanda » Livemint

Ashish Mishra with a terrific tale of a much-funded startup which didn’t quite figure out that not everyone is honest:

Let’s say you are a restaurant. Now, place 10 orders using 10 names or even the same name, each for Rs.300. Every order is a takeaway. Pay online using the BOGO voucher, a campaign (Buy One Get One) run by Foodpanda. So for Rs.300, get Rs.300 free. So for a Rs.600 order, you paid only Rs.300. How much does Foodpanda have to return to you, the restaurant? Rs.600. After deducting 12% as its cut, Rs.528. How much did you make in the process? Rs.228 . Did you have to deliver that order? Nope. So, a straight profit of Rs.228.

Now, let’s say you processed 100 such orders a day. For a month. Total investment: Rs.9 lakh. Reimbursed by Foodpanda: Rs.15.84 lakh. Your total gain, by just processing fake orders: Rs.6.84 lakh.

Now imagine you are not the only restaurant on the platform doing this.

link to this extract


Issue 178139 – android – Android full lockscreen bypass – 5.1.1 PoC » Android Open Source Project

John Gordon at the University of Texas at Austin:

Android 5.1.1 Lockscreen Bypass
—–
Summary: Unlock a locked device to access the homescreen, run arbitrary applications, and enable full adb access to the device. This includes access to encrypted user data on encrypted devices.
Prerequisites: Must have a password lockscreen enabled. (PIN / swipe untested)
Hardware: Nexus 4
Software: Google factory image – occam 5.1.1 (LMY47V)

Attack details:
Pasting a sufficiently large string into an input field will cause portions of the lockscreen to become unresponsive and allow the user to terminate those processes. An attacker can construct a large string by typing characters into the Emergency Dialer, then select all + copy + paste repeatedly to increase the string size exponentially. Once the string has been pasted, either into the Emergency Dialer or the lockscreen password prompt, attempting to type more characters or performing other intaractions quickly and repeatedly causes the process to become overloaded and crash, or produce a dialog allowing the user to kill the process. If done in a password prompt in the foreground of the camera application, this crash results in the homescreen or Settings applcation being exposed.

PIN/swipe is untested, rather than safe (as far as we can see). This seems to be pretty hard to do – the video is 18 minutes long, involving lots of copy/pasting. It’s not really a giant flaw like Stagefright; and Apple has had some egregious lockscreen bypasses in the past. (Though none in iOS 8 that I’ve seen.) The problem though is that this doesn’t help Android’s reputation among businesses considering whether to buy it. It’s not the exploit; it’s the suggestion of vulnerability.
link to this extract


Popping the publishing bubble » Stratechery

Ben Thompson, in his weekly “free to view” article, says that iOS 9’s adblockers are just going to finish what was already happening:

It is easy to feel sorry for publishers: before the Internet most were swimming in money, and for the first few years online it looked like online publications with lower costs of production would be profitable as well. The problem, though, was the assumption that advertising money would always be there, resulting in a “build it and they will come” mentality that focused almost exclusively on content product and far too little on sustainable business models.

In fact, publishers going forward need to have the exact opposite attitude of publishers in the past: instead of focusing on journalism and getting the business model for free, publishers need to start with a sustainable business model and focus on journalism that works hand-in-hand with the business model they have chosen. First and foremost that means publishers need to answer the most fundamental question required of any enterprise: are they a niche or scale business?

• Niche businesses make money by maximizing revenue per user on a (relatively) small user base
• Scale businesses make money by maximizing the number of users they reach
The truth is most publications are trying to do a little bit of everything: gain more revenue per user here, reach more users over there.

Worth it for the illustrations. You should subscribe so he can afford an iPad Pro and a stylus.
link to this extract


Google is 2 billion lines of code — and it’s all in one place » WIRED

Cade Metz:

Google has built its own “version control system” for juggling all this code. The system is called Piper, and it runs across the vast online infrastructure Google has built to run all its online services. According to [Google’s head of… big stuff? Rachel] Potvin, the system spans 10 different Google data centers.

It’s not just that all 2 billion lines of code sit inside a single system available to just about every engineer inside the company. It’s that this system gives Google engineers an unusual freedom to use and combine code from across myriad projects. “When you start a new project,” Potvin tells WIRED, “you have a wealth of libraries already available to you. Almost everything has already been done.” What’s more, engineers can make a single code change and instantly deploy it across all Google services. In updating one thing, they can update everything.

There are limitations this system. Potvin says certain highly sensitive code—stuff akin to the Google’s PageRank search algorithm—resides in separate repositories only available to specific employees. And because they don’t run on the ‘net and are very different things, Google stores code for its two device operating systems — Android and Chrome — on separate version control systems. But for the most part, Google code is a monolith that allows for the free flow of software building blocks, ideas, and solutions.

The point about Android and Chrome being on separate version control systems is one to note. Can’t merge the code until those two come together.
link to this extract


IPv6 will get a big boost from iOS 9, Facebook says » Computerworld

Stephen Lawson:

Even when all the pieces are in place for IPv6, iOS 8 makes an IPv6 connection only about half the time or less because of the way it treats the new protocol. With iOS 9, and IPv6 connection will happen 99% of the time, Saab predicts. 

IPv4 is running out of unused Internet addresses, while IPv6 is expected to have more than enough for all uses long into the future. Adoption has been slow since its completion in 1998 but is starting to accelerate. The release of iOS 9 may give a big boost to that trend. 

“Immediately, starting on the 16th, I’m expecting to see a lot more v6 traffic show up,” said Samir Vaidya, director of device technology at Verizon Wireless. About 50% of Verizon Wireless traffic uses IPv6, and Vaidya thinks it may be 70% by this time next year as subscribers flock to the iPhone 6s. 

Apple’s change should help drive more IPv6 use on Comcast’s network, too. About 25% of its traffic uses the new protocol now, and that figure could rise above 50% by early next year, said John Brzozowski, Comcast Cable’s chief IPv6 architect. 

This is the point, again and again. Android has the installed base; but iOS adoption is so rapid that it can drive change almost immediately.
link to this extract


Barbie wants to get to know your child » The New York Times

James Vlahos:

Hello Barbie is by far the most advanced to date in a new generation of A.I. toys whose makers share the aspiration of Geppetto: to persuade children that their toys are alive — or, at any rate, are something more than inanimate. At Ariana’s product-testing session, which took place in May at Mattel’s Imagination Center in El Segundo, Calif., near Los Angeles, Barbie asked her whether she would like to do randomly selected jobs, like being a scuba instructor or a hot-air-balloon pilot. Then they played a goofy chef game, in which Ariana told a mixed-up Barbie which ingredients went with which recipes — pepperoni with the pizza, marshmallows with the s’mores. ‘‘It’s really fun to cook with you,’’ Ariana said.

At one point, Barbie’s voice got serious. ‘‘I was wondering if I could get your advice on something,’’ Barbie asked. The doll explained that she and her friend Teresa had argued and weren’t speaking. ‘‘I really miss her, but I don’t know what to say to her now,’’ Barbie said. ‘‘What should I do?’’

‘‘Say ‘I’m sorry,’ ’’ Ariana replied.

‘‘You’re right. I should apologize,’’ Barbie said. ‘‘I’m not mad anymore. I just want to be friends again.’’

We now return you to our regular scheduled programming of “Philip K Dick short stories brought to life.” Take your pick: War Game, Second Variety or The Days of Perky Pat?
link to this extract


One great reason to update to iOS 9 – a nasty silent AirDrop attack is in town » Forbes

Australian researcher Mark Dowd, who heads up Azimuth Security, told FORBES ahead of Apple’s iOS 9 release on Wednesday that the flaw allowed anyone within range of an AirDrop user to install malware on a target device and tweak iOS settings so the exploit would still work if the victim rejected an incoming AirDrop file, as seen in the video below.

Users should update to iOS 9 and Mac OS X El Capitan, version 10.11, as soon as possible to avoid losing control of their phones and PCs to malware. Any iOS versions that support AirDrop, from iOS 7 onwards, are affected, as are Mac OS X versions from Yosemite onwards. There are few protections outside of upgrading, other than turning AirDrop off altogether. The service is off by default, though it’s possible to start it running from the lockscreen.

By carrying out what’s known as a “directory traversal attack”, where a hacker enters sections of the operating system they should not be able to access, Dowd found it was possible to exploit AirDrop and then alter configuration files to ensure iOS would accept any software signed with an Apple enterprise certificate. Those certificates are typically used by businesses to install software not hosted in the App Store and are supposed to guarantee trust in the provenance of the application. But, as FORBES found in a recent investigation into the Chinese iPhone jailbreaking industry, they’re often used to bypass Apple security protections.

I dunno, getting AirDrop to work is usually the biggest challenge I face. (The mitigation is pretty easy on any version – turn off Wi-Fi or Bluetooth, or turn Airdrop to accept files from Contacts Only or off; this leaves Wi-Fi and Bluetooth untouched.)
link to this extract


Google taken to court to uncloak ebook pirates » TorrentFreak

Early June, GAU [the Dutch trade organisation representing dozens of book publishers in the Netherlands] reported that Google appeared to be taking steps to prevent rogue sellers from offering illegal content via its Play store. The group also noted that BREIN was attempting to obtain the personal details of the ‘pirate’ seller from Google.

Unsurprisingly that wasn’t a straightforward exercise, with Google refusing to hand over the personal details of its user on a voluntary basis. If BREIN really wanted the seller’s identity it would have to obtain it via a court order. Yesterday the anti-piracy group began the process to do just that.

Appearing before the Court of The Hague, BREIN presented its case, arguing that the rogue seller was not merely a user of Google, but actually a commercial partner of Google Play, a partnership that earned revenue for both parties.

“The case is clear,” BREIN said in a statement.

“There was infringement carried out by an anonymous seller that was actually a commercial ‘partner’ of Google via Google Play. This is how Google refers to sellers in its own terms of use.”

BREIN says that ultimately Google is responsible for the unauthorized distribution and sales carried out via its service.

“There is no right to anonymously sell illegal stuff, not even on Google Play while Google earns money,” the anti-piracy group concludes.

In the UK I think this would be a fairly straightforward “Norwich Pharmacal” case. Wonder if Holland has anything comparable.
link to this extract


Amazon: ever-growing behemoth, or topped out?


An Amazon warehouse. Photo by hnnbz on Flickr

It’s the London Book Fair this week, and I was kindly invited to speak at its Digital Minds session on Monday. These are the slides that I created for the talk. (Plus the CC-licensed photo, as above.)

Obviously, for book publishers the terror over the past few years is that Amazon is going to eat up everything, laying waste to the old book-buying system and forcing down the prices they can ask while at the same time everyone dumps paper books in favour of Kindles.

For publishers, that looks like the worst kind of lock-in.

But I prefer a data-driven approach: look at the numbers, and the numbers in a broader context. Amazon provides pretty clear financial results (with useful breakdowns by geography and segment), and there are also useful datasets from book publishers about the size of the UK market. (I focussed on the UK market because that’s what was available, but if anyone wants to pay me to do a bigger study relating to other countries, get in touch :-))

Here’s the presentation:

A few words to add extra context (since I did actually talk too – this wasn’t just a mime show). The numbers relate to the slide number.

5) and 6) yeah, Amazon does sell beer, but my more general point is that these declines in numbers (of petrol filling stations and pubs open in the UK) are due to structural changes in society, not something Amazon has done. If you ascribe changes to the wrong cause, you’ll come up with the wrong solution to it.

7) Clearly, the decline in independent bookshops (overlaid onto the right-hand chart, showing the growth in book sales and ebook sales) predates ebooks – though not Amazon itself. This doesn’t look at concentration of the industry; I didn’t look at the simple number of books published. I think that has gone up, even excluding ebooks.

9) figures taken from Amazon’s results, and using a four-quarter moving average. The international media sales (red line) actually went negative in the most recent quarter, while US media sales (blue line) went to just 1%. “Media” covers everything from books to DVDs.

10) data from the Pew Research Center in the US, which does very robust studies. They haven’t found any growth in ereader ownership since January 2014. There’s a natural ceiling on ereader desire-to-buy.

11) Ereaders are popular with people who read a lot of books. The difference between the median and mean numbers here tell us this is a skewed population – those who read a lot really read a lot. They’re likely to have an ereader. But not everyone will get an ereader. The eager buyers have bought one.

13) See? New sales of Kindles have pretty much halted. Other more recent stories confirm this.

14) 30m Kindles sold in total is a lot – but compare that to total population in the US+Europe of about 500m. It’s not taking over the world.

15) 16) Amazon turns out not to be so great at making hardware that people want to buy.

17) Even in tablets, the rest of the market is growing, but the Kindle Fire HD isn’t doing much. Total about 30m sold (my calculation), also throughout US and Europe – but doubt there’s a lot of book reading going on with them; they’re for other media.

20) You may be able to think of another ebook that a “standard” publisher was able to turn into a bestselling book that was then made into a big film. (The Martian is being made into a film with Matt Damon. Looking forward to that.)

22) Amazon’s FCF (free cash flow) is a hot topic, at least in some quarters. The company shows very little profit, but its FCF is great. Isn’t it?

23) Well, the use of capital leases means that – rather as with the Labour government and PFI – the spending is all being pushed off the balance sheet and into a sort of future reckoning. Great as long as nobody worries about it; bad if Wall Street does worry about it.

24) you can just skip to this one if you want the conclusions.

Thanks for reading. I’m happy to come and give speeches at all sorts of events on topics like this.