Start up: the chat bots are here!, what Windows Phone?, Spotify’s IPO debt sprint, fixing iOS 9.3, and more

Compaq’s engineers (in Houston, Texas) discovered they needed a new strategy when low-cost rivals arrived in force. Photo by lungstruck on Flickr.

You can now sign up to receive each day’s Start Up post by email. You’ll need to click a confirmation link, so no spam.

A selection of 13 links for you. Use them wisely. I’m charlesarthur on Twitter. Observations and links welcome.

Land Registry: sell it off or open it up? » Shared Assets

»At Shared Assets we believe that privatisation is the wrong approach and is inconsistent with the Government’s stated commitment to ‘open data’. The Land Registry is currently fit for purpose, generates a surplus, and is trusted to fulfil its role underpinning over £4tn worth of property ownership across England and Wales. The Government is selling off a critical, well functioning, national statutory service that we are all obliged to use, primarily to raise funds.

We believe the potential impacts of creating a private sector monopoly on transparency and access to this critical data set are unacceptable, and that a more imaginative, and beneficial, approach would be to open up public land registry data for the common good.

«

I wrote on this topic too.
link to this extract

 


Microsoft: Windows Phone isn’t our focus this year » The Verge

Tom Warren:

»A single demo of Skype running on a Windows Phone was the only time a phone running Windows 10 Mobile appeared for longer than a few seconds, and it felt like Microsoft was more focused on Windows 10 for Xbox and HoloLens. I got the chance to speak to Windows chief Terry Myerson briefly after today’s keynote, and it’s clear Microsoft focus isn’t on phones this year.

“We’re fully committed to that 4-inch screen, there will be a time for it to be our focus, but right now it’s part of the family but it’s not the core of where I hope to generate developer interest over the next year,” explains Myerson. “There’s no lack of recognition to realize how important that form factor is, but for Microsoft with Windows and for our platform it’s the wrong place for us to lead.”

«

link to this extract

 


The day everything changed at Compaq » LinkedIn

Sean Burke was there as a product manager in September 1991, and saw that Compaq – which was expecting hardware gross margins of 40% – was getting walloped by IBM at the high price end and by Dell and others at the low-cost end. So he told Ben Rosen, the chairman, of his plan for a low-cost PC:

»I told Ben that it was absolutely possible for Compaq to create products that were low cost.  I mentioned that I already started working on a next generation low cost product concept, but it was not yet approved – either as an actual project or as a project that I would be assigned to.  He was interested and asked me to confidentially work on it and update him on the status.  He also told me, surprisingly, not to tell anyone about the project, including my management, but to just report back to him.

Obviously, a Product Marketing person can’t develop a product alone so I did what came natural and got the best engineering manager I could trust and rely on technically.   I had been working for the last year and a half with Jon Thompson, the Engineering Program Manager for the DESKPRO/M, and in the process we became good friends.  We began to work on this new project after normal business hours and weekends by contacting suppliers and other technology companies.  We created a story to tell these suppliers that we were going to leave Compaq and start our own PC Company.  It was amazing how many suppliers approached us and offered help.  The extent of the ideas and the pricing they offered us was even more amazing.

«

The internal politics turns out to be even more amazing, and Burke the naif used as a pawn. Recommended.
link to this extract

 


Spotify raises $1bn in debt financing » WSJ

Scoop by Douglas Macmilland, Matt Jarzemsky and Maureen Farrell:

»By raising debt instead of equity, Spotify adds to its war chest without the possibility of setting a lower price for its stock, which can sap momentum and hamper recruiting.

In June 2015, Spotify was valued at $8.5bn.

In return for the financing, Spotify promised its new investors strict guarantees tied to an IPO. If Spotify holds a public offering in the next year, TPG and Dragoneer will be able to convert the debt into equity at a 20% discount to the share price of the public offering, according to two people briefed on the deal. After a year, that discount increases by 2.5 percentage points every six months, the people said.

Spotify also agreed to pay annual interest on the debt that starts at 5% and increases by 1 percentage point every six months until the company goes public, or until it hits 10%, the people said. This interest—also called a “coupon” and in this case paid in the form of additional debt, rather than cash—is commonly used in private-equity deals but rarely seen in venture funding.

In addition, TPG and Dragoneer are permitted to cash out their shares as soon as 90 days after an IPO, instead of the 180-day period “lockup” employees and other shareholders are forced to wait before selling shares, the people said.

«

Debt like this is dangerous. First, it can be recalled – which kills a company. Second, as here, it comes with many strings, principally financial. In the first year, Spotify will have to pay out $25m (first six months, 5% of $1bn) + $30m (6%) = $55m.

In the second year, $35m (7%) + $40m (8%) = $75m. In the third year, $95m, and after that, $100m per year. It had $600m cash before this debt, so that’s $1.6bn in cash reserves; it can pay out for a while, but the real damage is to its profitability. It isn’t making money now (as far as anyone knows) and this will put that further out of reach. I think it’s safe to say that with this debt deal, Spotify can never make an operating profit if the debt payment is included.

This therefore is a financing deal aimed at getting Spotify over the IPO finish line as soon as possible so it can get a giant cash injection. Then its future losses become the public shareholders’ problem, rather than those of the venture capitalists or music labels that have funded it so far.
link to this extract

 


Amazon, Alibaba and an Indian Illusion » Bloomberg Gadfly

Andy Mukherjee:

»How can opening the door mean the exact opposite? The devil is in details of the policy, which says e-commerce platforms will only provide a marketplace and not influence the sale price of merchandise. In other words, while foreigners can facilitate retail, they will not really be retailers, burning their deep-pocketed investors’ money to drive myriad mom-and-pop stores out of business.Goldman Sachs believes the rules “could spell an end” to discount-led competition among e-tailers. While that might be a welcome path to eventual profitability for an industry surviving on bragging rights about how much merchandise it handles, what’s good for the collective may be bad news for individual companies. Late last year, the lobby group of traditional Indian retailers kicked up a fuss when Amazon gave out measly 200 rupee ($3) gift cards to consumers, because this purportedly showed Amazon acting as a retailer when it was only allowed to be a technology platform.If the new rules do nothing but extend the “essential continuity” of the old rules, that might please Sir Humphrey — but Jeff Bezos is certainly going to mind.

«

Seems that the new regulations will bring online retailing to heel in India. Not good – but smartphones will probably provide a way around it.
link to this extract

 


Clippy’s back: the future of Microsoft is chatbots » Bloomberg BusinessWeek

Dina Bass:

»Whether you think bots are exciting or alarming, a lot of people are already using them. Microsoft’s Chinese version of Tay, called Xiaoice, has been available for 18 months and has 40 million users. Conversations with Xiaoice (pronounced shao-ice) average about 23 exchanges per session. Few users chat that long with Siri. Facebook is working on an assistant named M and already has bots operating on its Messenger app that let users book a haircut or send flowers. The Wall Street Journal reported in December that Google is working on a bot-based app that will answer users’ questions. Amazon has its best-reviewed product in years in the Echo, a voice-controlled black cylinder that sits in customers’ kitchens and performs a fast-growing list of tasks—it can look up recipes, order groceries, turn on the news, play songs, and read e-books aloud. Slack, the corporate messaging service, has bots that can manage your expenses and order the office beer.

On March 30, at Microsoft’s annual Build conference for software developers in San Francisco, Nadella will try to undo the damage from Tay and unveil his vision, which he calls “conversation as a platform.” Microsoft will show off several different bots and programs that manage tasks via discussion. Some you’ll be able to text with, like Tay; others are just concepts cooked up for the show to spark developers’ imaginations.

«

The question is whether, as with Tay, the corpus (that it learns from) is already poisoned. Humans learn not to do certain things in social situations; Tay and its brethren are being thrown into situations where learning is almost impossible because the barriers between good and bad behaviour are surprisingly narrow. “Hitler could have done a better job” can be said ironically, or flatly; its meaning to the listener depends on a lot of pre-knowledge.
link to this extract

 


MOTOBOT ver.1|Tokyo Motor Show 2015 – Event YAMAHA MOTOR CO., LTD.

»What makes the MOTOBOT project unique is its approach to completely automated operation. Unlike the current methods used for automobile self-driving systems, which have progressed in recent years, the aim is for a humanoid robot to operate a vehicle unmodified for autonomous use. Based on data for vehicle speed, engine rpm, machine attitude, etc., MOTOBOT will control its six actuators* to autonomously operate the vehicle. Going forward, technology for machine position recognition (high-precision GPS, various sensors, etc.) and machine learning will be utilized to enable MOTOBOT to make its own decisions regarding the best lines to take around a racetrack and the limits of the motorcycle’s performance, so that it can improve its lap times with successive laps of the track.

«

First they came to conquer the chess players, but I didn’t play chess. Then they came to conquer the Go players, but I’d never heard of Go. Then they said they were going to beat the motorbike riders… by 2020.. which is only four years away.
link to this extract

 


Google also has been ordered to help unlock phones, records show » WSJ

Devlin Barrett:

»Google has been repeatedly ordered to help federal agents open cellphones, according to court records in seven states that show Apple Inc. isn’t the only company facing government demands at the center of a fierce debate over privacy and security.

The American Civil Liberties Union found 63 instances where the government sought a court order under a 1789 law called the All Writs Act to compel Apple and Google to help them access data on locked phones.

The outcome of those cases aren’t clear. However, federal prosecutors have said until late last year, when Apple began resisting such efforts, it was routine for judges to approve such requests from federal prosecutors. And those requests aren’t a new phenomenon—the cases stretch back to 2008.

A Google spokesman said: “…we’ve never received an All Writs Act order like the one Apple recently fought that demands we build new tools that actively compromise our products’ security…. We would strongly object to such an order.”

«

This isn’t surprising – neither Google’s cooperation (Apple cooperated too where it could) nor the fact that the AWA hasn’t been needed; the number of Android phones out there with full disk encryption enabled must be tiny compared to the number of iPhones.
link to this extract

 


How to fix iOS 9.3’s broken Safari, Mail and Messages links » Ben Collier

»If you’ve been hit by the iOS 9.3 broken links you can follow these steps to fix the issue whilst we wait for a full update from Apple. Unfortunately you’ll need to hook your iPhone or iPad up to your computer and sync with iTunes.

«

It’s a 13-step process, which is only one more than you need to make your way back from alcoholism. So far it’s only Booking.com, but I feel sure that malware will try to exploit this in future.
link to this extract

 


In snub to Google, AT&T looks to sell alternative Android phone » The Information

Amir Efrati on AT&T’s plan to sell a Cyanogen-based phone:

»Cyanogen wants to let any phone maker, wireless carrier or app developer integrate their services more deeply with its alternative form of Android, in ways that they can’t do with the official Google version. Microsoft, for instance, is integrating Skype, its Internet calling service, and Cortana, its virtual assistant, into Cyanogen. The end result is that people will be able access and interact with their Skype contacts directly from the phone’s built-in dialer app, and they will be able to summon apps like Spotify by speaking to Cortana. Such scenarios are not available on Google’s version of Android.

While Cyanogen can control many aspects of devices it powers, they all come preloaded with Google services like search, the Google Play app store and Google Maps (because Cyanogen knows that consumers need them). In exchange for having those Google services, the devices must comport with certain Google rules, such as displaying those apps prominently on the home screen. For its part, Cyanogen is able send messages to phone users to help them customize the devices so that integrations with non-Google apps will be more prominently displayed on, say, the home screen, instead of Google’s apps.

«

So, basically, it’s Just Another Skinned Google Android Phone. Ron Amadeo has a succinct two-paragraph rant on the oversell of Cyanogen.
link to this extract

 


Facebook’s Messenger lands first airline as chat app pushes into commerce » USA Today

Jessica Guynn:

» KLM Royal Dutch Airlines passengers will soon be able to check in, get flight updates, make travel changes and talk to customer service reps straight from Facebook’s Messenger chat app.

KLM is the first airline and the first major European partner for Messenger, which is used by 800 million people around the globe.

Facebook sees customer service as a natural extension of chat apps which were built for, well, chatting. The giant social network launched Messenger for Business one year ago to pursue “conversational commerce,” the notion that we will all soon be talking to — and eventually transacting with — businesses over messaging apps.

Since then, businesses in a growing number of industries have tried out the service to chat with customers, among them hotel chain Hyatt and retailers Walmart and Everlane. In a hint of the kind of commercial transactions to come, users of Uber and Lyft can hail a ride by tapping a new transportation option inside Messenger and share the details with friends.

«

The app becomes the platform..
link to this extract

 


With Galaxy S7, Samsung seen rediscovering its mobile mojo | Reuters

Se Yong Lee:

»several brokerages on Wednesday upgraded first-quarter forecasts for what is still the world’s top smartphone maker, citing a strong start for the Galaxy S7 and S7 edge premium phones that were launched earlier this month.

Samsung likely shipped 9.5m S7 phones in the first quarter, significantly more than the initial estimate for 7m, Jay Yoo, industry analyst at Korea Investment & Securities, wrote in a report.

“It looks like the sell-in numbers have been pretty good and analysts are raising their sales forecasts for the S7 this year,” noted HDC Asset Management fund manager Park Jung-hoon.

“The firm is pushing up volume in the mid-to-low tier to protect market share. Starting S7 sales about a month earlier than the S6 to take advantage of Apple not having new products out yet was also a good move.”

«

link to this extract

 


Among iPhone launches, the SE is indeed Small Edition – but it’s bringing new consumers to iPhone » Slice Intelligence

»Early data from Slice Intelligence indicates that the SE may help Apple grow its maturing iPhone consumer base. Only 35% of iPhone SE buyers purchased an iPhone online in the past two years, and 16% of them were previously Android users. By comparison, 49% of iPhone 6S buyers upgraded from a previous iPhone, and 10% replaced an Android device they bought online within the past two years.

Buyers of the SE look much different than the Apple fanboy audience typically queuing up to buy the latest from Cupertino. They’re older, less educated, and surprisingly, more male. More than one fifth of SE buyers are in the 45-54 age demographic, versus 18% for all iPhone buyers; and 77% of SE buyers are men, versus 69%.

«

Conversation inside Apple HQ: Analyst 1: “Huh? Male, aged 45-54? Less educated?”

Analyst 2: “OH DEAR GOD. We’ve invented the TRUMP PHONE.”
link to this extract

 


Errata, corrigenda and ai no corrida: none notified.

Start up: Oracle’s $9.3bn Android, FOI v Land Registry, have a robot bin!, longer smartphone life, and more

Thrill to the arrival of Oculus Rift and the brave new possibilities it enables! Photo by Mike Cogh on Flickr.

You can now sign up to receive each day’s Start Up post by email. You’ll need to click a confirmation link, so no spam.

A selection of 11 links for you. Use them wisely. I’m charlesarthur on Twitter. Observations and links welcome.

Oracle v Google: Big Red wants $9.3bn in Java copyright damages » The Register

Chris Williams:

»Last year, Oracle successfully argued that it can copyright software interfaces – not just the software itself, the way it interfaces with other code, too. However, the trial jury deadlocked on whether or not Android’s infringement of Oracle’s copyright constituted “fair use.”

The case is heading back to trial in May to effectively work out how much money Google owes Oracle. In the meantime, the pair have been squaring up to each other in San Francisco’s federal court. In January, Oracle revealed that Google has made $31bn in sales and $22bn in profit from Android since it launched in 2008 – figures Google fought fiercely to keep secret.

Now one of Oracle’s expert witnesses, James Malackowski, has produced an analysis [PDF] that concludes that Big Red is owed $475m in damages and up to $8.89bn in recovered Android profits. Malackowski is chief exec of Ocean Tomo, which does intellectual property valuations among other things.

«

That’s a lot of money. (Surprise! Google says the analysis is wrong.)
link to this extract

 


Unable to open links in Safari, Mail or Messages on IOS 9.3 » Ben Collier

Collier was using booking.com’s app, which turned out to have screwed up in a big way:

»A lot of users (including myself and a few friends) are experiencing links in Mail and Messages not working, and some links in Safari, like Google Search results, not opening. A long press on a broken link causes the app you’re in to crash, otherwise a standard tap highlights the link but nothing happens.. It looks like there’s a bug in iOS that completely breaks the Universal Links if it gets served an app association file that’s too large.

Benjamin Mayo of 9to5mac.com reported installing the Booking.com app consistently broke their test devices – which led Steve Troughton-Smith (who else…) to take a peep at their association file, and tweet:

“Wow http://booking.com literally put every URL they had into their site association file. 2.3MB download ”

It seems that the large size of their file, due to it having every URL from their website inside it breaks the iOS database on the device. Apple allows you to have pattern based matching, so instead of having to include every hotel’s URL in the association file, Booking.com could just put /hotel/* to match all the hotels on their site.

Whilst Booking.com aren’t following the recommended approach, it’s not their fault that a third-party can break a fundamental system feature like web browsing. Apple should be handling these edges graciously.

The worst part – deleting the app doesn’t clear the Universal Link association. Because the OS process that handles the Universal Links has crashed, it appears unable to remove the corrupt database.

«

You can just about fix it via lots of subtle rebooting and deleting. Quite a screwup.
link to this extract

 


Oculus Rift review: a clunky portal to a promising virtual reality » The New York Times

Brian Chen:

»“People who try it say it’s different from anything they’ve ever experienced in their lives,” Mr. Zuckerberg wrote in a Facebook post when he announced the Oculus acquisition. “But this is just the start. Imagine enjoying a courtside seat at a game, studying in a classroom of students and teachers all over the world or consulting with a doctor face-to-face — just by putting on goggles in your home.”

Over the past week, I tested the Rift and many pieces of content for the system to see how true Mr. Zuckerberg’s words might ring. I can report that while the Rift is a well-built hardware system brimming with potential, the first wave of apps and games available for it narrows the device’s likely users to hard-core gamers. It is also rougher to set up and get accustomed to than products like smartphones and tablets.

«

Long setup, big downloads which can’t be done simultaneously with device use, and games where the VR benefits are unclear. Early days yet.
link to this extract

 


A quick look at the Private Eye FOI’d “Offshore Landowners” data from the Land Registry » OUseful.Info

Tony Hirst:

»A few days ago, Private Eye popped up a link to the (not open) data they’d FOId from the Land Registry around land registry applications made by offshore companies: Selling England (and Wales) by the pound.

I thought have have a quick look at the data to see what sorts of thing it contained. I’ve popped a quick introductory conversation with it here: Private Eye – UK Land Ownership By Offshore Companies.

One of the things I learned was that solar panel installation companies can often get a hold on you…

«

This is precisely the sort of analysis, driven partly through FOIA, that would become impossible if the Land Registry were to be privatised.
link to this extract

 


What does your reaction to a robotic trash can say about you? » Atlas Obscura

Cara Giamo:

»Imagine you’re in a cafeteria, finishing up a bag of chips and chatting with some friends. You’re beginning to think about getting up to throw away your wrapper, when—suddenly—the nearest trash barrel approaches you instead. It rolls back and forth, and wiggles briefly. It is, it seems, at your service.

How do you respond?

«

Like this:

»

The trash barrel has delivered some particularly unique insights. First of all, Sirkin and Ju say, it highlights how good people are at subtly refusing to acknowledge interactions they don’t want or need—a behavior the team has dubbed “unteracting.” If the trash barrel approaches a table of people, and they have no trash to give it, they generally won’t shoo it off. They’ll just steadfastly ignore it until it rolls away again. “They’re using their gaze as a tool for deciding when they’re engaging or not,” says Ju. (You can see this about halfway through the video, when a man on a cell phone refuses to look at the barrel until it backs off.)

On the other hand, people who did make use of the barrel felt miffed when it didn’t respond more. “People kind of expected it to thank them,” says Sirkin. “They’ll say ‘I fed the robot, and it didn’t thank me, and that was insulting.’” Some would also whistle for it, or dangle trash in front of it enticingly.

«

link to this extract

 


Alphabet: the thriving cult of greed and evaluation » Medium

Jake Hamby:

»In Google, employees are evaluated every year according to an opaque “perf” system that generates numeric scores that the employee is not allowed to see or to challenge. If an employee’s perf isn’t improving, they face “Performance Expectation Plans” and “Performance Improvement Plans” of increasing severity, which the employee is told are designed to bring them back into the fold, but which are actually designed to create a paper trail for HR in order to terminate the individual’s employment if management determines they are no longer worth the amount it costs the company to continue to employ them.

The problem with companies like Google is that they’re losing engineers at every level of the company because it’s simply no longer fun to work there, or at least that was my experience. I was punished by my manager for lower “perf” than he expected from me, due to my complete loss of interest in the real overarching goals of Android (to provide a minimal platform for Google’s closed-source, proprietary apps) as opposed to the goals presented to the public and Google’s partners (to provide an exceptional platform for Google’s partners to make great smartphones), and to my depression over the recent loss of my father after his multi-year battle with dementia and Parkinson’s disease.

«

Hamby left Google in 2014.
link to this extract

 


What you should (and shouldn’t) do to extend your phone’s battery life » The Wirecutter

Dan Frakes, Nick Guy and Kevin Purdy:

»One of the biggest complaints people have about their smartphone is that the battery doesn’t last long enough. For many people, just making it through the day can be a challenge, which is why you see so many “How to make your phone’s battery last longer!” articles in your friends’ Facebook feeds. But many of the claims in those articles are specious at best, and some of the tricks they suggest could actually shorten your battery life. So which ones should you try?

We partnered with The New York Times to find the answer by testing, on both Android and iPhone smartphones, a slew of procedures that people, publications, and — in some cases — smartphone manufacturers suggest for getting more use time out of your phone.

«

Some of these are really surprising – like not bothering to turn off Bluetooth or Wi-Fi to save battery.
link to this extract

 


“Internet Connection Records”: answering the wrong question? » Paul Bernal’s Blog

On the topic of the UK government’s proposed Investigatory Powers Bill, which wants to introduce an “internet connection record” that could be queried for any person:

»The real problem is a deep one – but it is mostly about asking the wrong question. Internet Connection Records seem to be an attempt to answer the question ‘how can we recreate that really useful thing, the itemised phone bill, for the internet age’? And, from most accounts, it seems clear that the real experts, the people who work in the internet industry, weren’t really consulted until very late in the day, and then were only asked that question. It’s the wrong question. If you ask the wrong question, even if the answer is ‘right’, it’s still wrong. That’s why we have the mess that is the Internet Connection Record system: an intrusive, expensive, technically difficult and likely to be supremely ineffective idea.

The question that should have been asked is really the one that the Minister asked right at the start: how can we find all these terrorists and paedophiles when they’re using all this high tech stuff? It’s a question that should have been asked of the industry, of computer scientists, of academics, of civil society, of hackers and more. It should have been asked openly, consulted upon widely, and given the time and energy that it deserved. It is a very difficult question – I certainly don’t have an answer – but rather than try to shoe-horn an old idea into a new situation, it needs to be asked.

«

link to this extract

 


AI’s biggest mystery is the ethics board Google set up after buying DeepMind » Business Insider

Sam Shead:

»DeepMind CEO and cofounder Demis Hassabis has confirmed at a number of conferences that Google’s AI ethics board exists. But neither Hassabis nor Google have ever disclosed the individuals on the board or gone into any great detail on what the board does.

Azeem Azhar, a tech entrepreneur, startup advisor, and author of the Exponential View newsletter, told Business Insider: “It’s super important [to talk about ethics in AI]. ”

Media and academics have called on DeepMind and Google to reveal who sits on Google’s AI ethics board so the debate about where the technology they’re developing can be carried out in the open, but so far Google and DeepMind’s cofounders have refused.

It’s generally accepted that Google’s AI ethics board can only be a good thing but ethicists like Evan Selinger, a professor of philosophy at the Institute for Ethics and Emerging Technologies, have questioned whether Google should be more transparent about who is on the board and what they’re doing.

«

link to this extract

 


Ransomware’s aftermath can be more costly than ransom » TechNewsWorld

John Mello:

»Downtime caused by a ransomware attack can cost a company more than paying a ransom to recover data encrypted by the malware, according to a report released last week by Intermedia.

Nearly three-quarters (72%) of companies infected with ransomware could not access their data for at least two days because of the incident, and 32% couldn’t access their data for five days or more, according to the report, which was based on a survey of some 300 IT consultants.

“If you’ve got a large number of users and downtime runs into multiple days, then the cost of that downtime adds up pretty quickly to the kind of ransom amounts that cybercriminals are demanding potentially,” said Richard Walters, senior vice president of security products at Intermedia.

Those losses occur even if a company has taken precautions to back up its data. “You have to contain the infected systems, then wipe them completely and then restore them,” he told TechNewsWorld. “That process in more than half these cases took longer than two days.”

Companies faced with the decision between paying a ransom or restoring their systems from backups could find that it would cost them less to pay the ransom.

«

You can see how a pricing mechanism would take hold if the ransom was too high or too low. In which case, there must be an optimum ransom at which income is maximised, even though it’s too high for some companies. A case study for an academic somewhere, surely.
link to this extract

 


Certified Ethical Hacker website caught spreading crypto ransomware » Ars Technica

Dan Goodin:

»EC-Council, the Albuquerque, New Mexico-based professional organization that administers the Certified Ethical Hacker program, started spreading the scourge on Monday. Shortly afterward, researchers from security firm Fox IT notified EC-Council officials that one of their subdomains—which just happens to provide online training for computer security students—had come under the spell of Angler, a toolkit sold online that provides powerful Web drive-by exploits. On Thursday, after receiving no reply and still detecting that the site was infected, Fox IT published this blog post, apparently under the reasonable belief that when attempts to privately inform the company fail, it’s reasonable to go public.

Like so many drive-by attack campaigns, the one hitting the EC-Council is designed to be vexingly hard for researchers to replicate. It targets only visitors using Internet Explorer and then only when they come to the site from Google, Bing, or another search engine. Even when these conditions are met, people from certain IP addresses—say those in certain geographic locales—are also spared. The EC-Council pages of those who aren’t spared then receive embedded code that redirects the browser to a chain of malicious domains that host the Angler exploits.

«

link to this extract

 


Errata, corrigenda and ai no corrida:

Start up: Hubspot culture, bad citations, Wikipedia for piracy, how Tay was pre-broken, and more

Who’d have guessed that letting a browser page vibrate your phone could be abused by scammers? Photo by queenkv on Flickr.

You can now sign up to receive each day’s Start Up post by email. You’ll need to click a confirmation link, so no spam.

A selection of 10 links for you. Use them wisely. I’m charlesarthur on Twitter. Observations and links welcome.

My year in startup hell at Hubspot » Fortune

Dan Lyons got dumped by Newsweek, having been a journalist for decades, and then as a 50-something joined a Boston startup whose pitch is basically spam people (but never call it spam), created by a co-founder who is only ever referred to by his first name:

»Dharmesh’s culture code incorporates elements of HubSpeak. For example, it instructs that when someone quits or gets fired, the event will be referred to as “graduation.” In my first month at HubSpot I’ve witnessed several graduations, just in the marketing department. We’ll get an email from Cranium saying, “Team, just letting you know that Derek has graduated from HubSpot, and we’re excited to see how he uses his superpowers in his next big adventure!” Only then do you notice that Derek is gone, that his desk has been cleared out. Somehow Derek’s boss will have arranged his disappearance without anyone knowing about it. People just go up in smoke, like Spinal Tap drummers.

Nobody ever talks about the people who graduate, and nobody ever mentions how weird it is to call it “graduation.” For that matter I never hear anyone laugh about HEART or make jokes about the culture code. Everyone acts as if all of these things are perfectly normal.

«

Some people hate Lyons, but he’s never less than incisive to the point of sulphuric.
link to this extract

 


January 2014: potential malicious use of the HTML5 Vibrate API » Terence Eden’s Blog

This was Eden writing just over two years ago:

»There is a new API in town! HTML5 will (soon) let you make the user’s device vibrate. What fun! Obviously, it’s useful for triggering alerts, improved immersivness during gameplay, and all sorts of other fun things like sending Morse Code messages via vibration.

At the moment, Chrome (and other Android browsers) ask for permission before accessing features such as geo-location, camera, address book etc. This is a security measure to prevent your private information leaving your hands without your knowledge.

At the moment, accessing the HTML5 Vibrate API doesn’t trigger an on-screen warning. Its use is seen as pretty innocuous. Because, realistically, the worst it can do is prematurely drain your battery. Right?

I’m not so sure.

«

He was right not to be sure. Comments from this year show that this is indeed being used by scammy ads. (It’s supported on Chrome for desktop and mobile, not on Safari for desktop or mobile; you can check your browser’s capability.
link to this extract

 


Citation, appropriation, and fair use: News Genius picks up again where failures left off » Glenn Fleishman’s Glog

Fleishman points to previous attempts to let people write content on top of other peoples’ work:

»As with many Internet tools created without any forethought about abuse, opting out, and reporting and resolving issues, [News] Genius [which lets people put commentary onto web pages without the consent of the author] seems malicious in absence rather than in intention. As Ella [Dawson] wrote:

»

You can hate-read my content all you want—I know that is a risk of being a person who says things on the Internet. But when you create a tool that pastes commentary directly on top of my work without letting me opt-in and without providing a way for people to turn off the annotation on their pages, you are being irresponsible. You are ignoring the potential your tool has to be abused, and you are not anticipating the real harm your tool can do.

«

Contrast this with Medium’s approach to annotation on Medium’s site. Essay authors can receive public or private notes, and choose which to make public and which to remain private or delete. Commentary on a post, called “responses,” is presented at the end like comments, but each response is a full-fledged Medium post.  (Last year, Medium added the ability for everyone, instead of certain outlets or requiring email, to disable responses to appear linked; they can still be made, they just don’t appear at the end of the referenced post.)

«

Past experience suggests News Genius will die a death; it’s just a question of how long it will take, and how many people will have lousy experiences like Dawson.
link to this extract

 


Wikipedia doesn’t realize it’s the developing world’s internet gatekeeper » Motherboard

Jason Koebler:

»If you’re just catching up, Angolans are using free access to Wikipedia and Facebook to trade copyrighted movies, music, and television shows, a development that is decidedly against Wikipedia’s rules. The product is called Wikipedia Zero, which “zero rates” all data going to and from Wikipedia websites from mobile phone users in 64 developing countries, meaning the customer doesn’t pay any money for it. In Angola, 50mb of mobile data normally costs $2.50; the median annual salary is $720.

At first glance, giving people in developing nations unlimited access to Wikipedia or Facebook’s Free Basics program seems like a no-brainer. Some access is better than no access, the thinking goes, and Wikimedia, as a nonprofit corporation focused on spreading knowledge, has gotten less public flak than Facebook has for Free Basics, which critics say serves only to indoctrinate the developing world into Facebook’s ecosystem. But the situation in Angola shows that there are problems with zero-rating that Wikimedia’s nonprofit status and knowledge-sharing mission can’t solve.

«

link to this extract

 


Land Registry faces privatisation » The Guardian

Heather Stewart, Hilary Osborne and Rowena Mason:

»The Land Registry is being put for up for sale less than two years after the Liberal Democrats blocked previous plans for a £1bn-plus privatisation.

Sajid Javid, the business secretary, faced immediate criticism for announcing the selloff of the 150-year-old agency – which maintains records on the ownership of land and property across England and Wales – just as the Easter break was about to begin.

Union leaders criticised what they called the “cynical” timing. Mark Serwotka, general secretary of the Public and Commercial Services union, said: “Homebuyers and owners rely on the Land Registry to provide an impartial professional service and it must remain under public control, free from any profit motive and conflict of interest.

«

In the UK, sales of properties and land must be registered with Land Registry. Privatising it would create a private monopoly with the force of law. This would create a company that could raise fees on any product and which would not be answerable to Freedom of Information requests.

This is an unbelievably stupid idea. I’m thus not surprised that Savid Javid is backing it.
link to this extract

 


Fly-eye phones are coming » Kevin Marks

Written in January, and increasingly relevant:

»the cameras built into phones have reached the limits of useful resolution, and the differences in responsiveness have been competed away too. The next step will be multiple cameras on each side of the phone. I expect we’ll first see 2 cameras at opposite ends of the phone, so you can take stereoscopic images and videos with natural eye spacing.

However, having simultaneous spaced images means you can extract 3d information from the photo – Google’s camera app has done this for a while but you need to pan up and down. This means you can change depth of field synthetically to give nicer images by blurring unwanted foreground or background details out. This also means you can more easily compensate for lens distortion, making faces less spherical looking in close-ups.You can even reconstruct 3d objects, scanning smaller ones, or panning around a room to derive a more accurate 3d model.

Once you have an accurate 3d model of the room, doing Augmented Reality becomes much more practical – you can place elements on the walls or floors, and have them pass behind and in front of object in a more realistic fashion. Think of the gratuitous effects Snapchat can do with that – 3d halos, birds flying around your head.

«

Look what Snapchat can already do with face recognition (Face Swap) and you get an inkling.
link to this extract

 


TayAndYou – toxic before human contact » Smerity.com:

Stephen Merity argues, very convincingly, that Microsoft’s Tay going haywire wasn’t shocking, surprising or unpredictable at all:

»The entire situation was made worse by a few factors:

• TayAndYou would repeat phrases uttered to it, a trivial attack vector
• The facial recognition on images included a small number of utterances, another trivial attack vector that could be gamed for negative results
• TayAndYou produced over 96,000 tweets in a single day, meaning little to no quality oversight would be in place – if there were any potentially insulting responses they were near guaranteed to be found

Was implementing a filter for swearing out of scope..? To be fair, the bot would still find something insulting to say but I’m certain the majority of worst cases would be flagged.

Even if filtering on the generation end was considered too much, the training data shouldn’t have been toxic. Maybe at least filter the training data for anything discussing Hitler. If a PR department wouldn’t want their humans tweeting about Hitler, I’ve no clue why you’d want a bot to.

«

Meanwhile, Microsoft is ever so ever so sorry.

If you’re working in AI/deep learning, Merity’s blog is worth rummaging through.
link to this extract

 


Donald Trump will win in a landslide. *The mind behind ‘Dilbert’ explains why. » The Washington Post

Michael Cavna:

»[Scott] Adams, in other words, believes that Trump himself has turned the campaign game around. On the stump, the real-estate mogul is not running on the knowledge of his numbers or the dissection of the data. He is running on our emotions, Adams says, and sly appeals to our own human irrationality. Since last August, in fact, when many were calling Trump’s entry a clown candidacy, the “Dilbert” cartoonist was already declaring The Donald a master in the powers of persuasion who would undoubtedly rise in the polls. And last week, Adams began blogging about how Trump can rhetorically dismantle Clinton’s candidacy next.

Adams, mind you, is not endorsing Trump or supporting his politics. (“I don’t think my political views align with anybody,” he tells The Post’s Comic Riffs, “not even another human being.”) And he is not saying that Trump would be the best president. What the Bay Area-based cartoonist recognizes, he says, is the careful art behind Trump’s rhetorical techniques. And The Donald, he says, is playing his competitors like a fiddle — before beating them like a drum.

«

It’s about irrationality. And people are irrational, no matter what they might think. (I’m very much hoping this is wrong.)
link to this extract

 


The readers’ editor on closing comments below the line » The Observer

Stephen Pritchard is the readers’ editor of The Observer, the Sunday sibling to The Guardian:

»While there is a general desire to open comments on as many subjects as possible, moderators are made aware in advance of opinion pieces that are likely to need careful handling.

Last weekend, after consultation, comments were delayed on several Observer articles, including Nick Cohen on becoming a Jew, Victoria Coren Mitchell on the Adam Johnson underage sex case and Barbara Ellen on Jamie Oliver’s advocacy of breastfeeding.

Comments opened once moderators were in place, but within minutes antisemites and Holocaust deniers were hounding Cohen, apologists for sex with teenagers were appearing in the Coren Mitchell thread and misogynists were busy insulting Ellen. It had to stop.

The Telegraph is in the process of ending commentary on its site. That’s not being proposed here, but editors need to think harder about when it would be wise to switch off the ability to comment if a subject is likely to attract so much rage that a mature conversation becomes impossible. It devalues our journalism and offends our readers.

«

Fewer open comment threads also means less moderation, which saves money. But I think this is a broader trend: general news sites will have fewer and fewer open comment threads. It’s just not worth the trouble. Speaking of which…
link to this extract

 


Public Access: we’re shutting down our comments … see you next week » Engadget

Here’s Amber Bouman at tech site Engadget:

»The thing is, we like having a comments section. It gives our readers a place to share their experiences, point out mistakes we’ve made, offer up different perspectives and provide more information. Our comments section can be an incredible place to visit, and we value that our readers take the time out of their day (often repeatedly) to participate. But we can’t take pride in a comment system that isn’t offering you the features you need to participate; that runs amok with racist, sexist or homophobic slurs and threats; or that takes joy in in-fighting and provoking fights.

A quality comments section should make it easy for users to contribute. A good comments section has users who feel a sense of duty and kinship, who act as a community. An exceptional comments section informs its readers, corrects authors and provides worthwhile insights in a polite and constructive manner.

«

It can be done; I think you make people pay to be commenters, and revoke that – without refund – if they cross the line.
link to this extract

 


Errata, corrigenda and ai no corrida: none specified.