DarkCyber for August 13, 2019, Now Available

August 13, 2019

DarkCyber for August 13, 2019, is now available at www.arnoldit.com/wordpress and on Vimeo at https://www.vimeo.com/353202530. The program is a production of Stephen E Arnold. It is the only weekly video news shows focusing on the Dark Web, cybercrime, and lesser known Internet services.

DarkCyber (August 6, 2019) reviews on way for organization compromised via ransomware to address the problem. The approach is free and can work in many cases. Europol, a number of national police agencies, and more than 20 commercial vendors have created NoMoreRansom.org. The site provides specific information and decryption methods for more than 100 widely used ransomware systems. Each of the decryption tools is available with a how-to user manual and links to the code required to decrypt the encrypted data. If a user cannot identify the specific malware used to attack an organization, the site includes a feature which can identify the specific ransomware used in an attack. For those unfamiliar with the mechanics of ransomware, the site includes a Frequently Asked Questions section. The information is clear, concise, and designed for a person with average computing expertise. Most system professionals will find the site intuitive and designed to allow quick access to the needed decryption tools.

Other stories in this week’s DarkCyber include:

Setting up a front company. DarkCyber reports that an online information service has published information explaining how to set up a front company in the US. Front companies or “fronts” are useful for tax evasion, money laundering, and fraud. Few states in the US require basic information about those setting up the front company. Data about directors of the company is not required in dozens of states. The procedure is simple, and in some states, the registration of the front company can be handled by a representative such as a law firm. Front companies are used to hide ownership of assets; for example, other companies.

The US government has published a report about the security lapses at Equifax, a credit checking service. The company lost more millions of customers’ personally identifying information. DarkCyber provides a direct link to this informative government report. Bad actors, however, may find the information in the report useful in determining how to attack a financial services firm in the US.

The United States Postal Service cyber intelligence team is adding tactics. The USPS will make us of some of the techniques popular with cyber criminals. The mail services in Western Europe and the US have been used to deliver contraband and enable other illegal activities. The new approach will make it possible for investigators to join closed forums and discussion groups and adopt other behaviors in wide use by bad actors.

Researchers at the University of California-Berkeley have developed a method for enhancing solar cells. With the new technology, drones could greatly extend their flight time. The technique enhances the voltage generated by solar cells using sophisticating reflective coatings and new manufacturing procedures. Surveillance drones, for example, could remain aloft for weeks or months, not hours and days.
A new multipart series about Amazon policeware initiative begins on November 1, 2019. Programs are available on Vimeo.com and YouTube.com.

The last program in this series will be on August 27, 2019. DarkCyber will return in November 2019 with a new series focused on Amazon’s policeware.

Kenny Toth, August 13, 2019

Amazonia for August 12, 2019

August 12, 2019

The crushed shrubs and small trees indicate that the Bezos bulldozer rolled through the digital landscape last week. Let’s look at some of the maneuvers the massive crawlers executed.

Amazon Facial Recognition Accuracy

One of the more important reports which appeared last week was “Which Company Does the Best Job at Image Recognition? Microsoft, Amazon, Google, or IBM?” The story, according to one DarkCyber researcher, seemed to be a public relations play. Keep that in mind because the data in the write up are provided without meeting DarkCyber’s factuality scratch test. A sample size of 500 images is unlikely to represent image type (full profile, side view, close up, distance, etc.), different nationalities, lighting conditions, image resolution, and other variables necessary to have confidence in a facial recognition analysis.

The analysis considered four recognition systems: Amazon Rekognition, Google Vision, IBM Watson, and Microsoft Azure (the current name but that can change at any time).

The loser was IBM Watson. DarkCyber found that amusing. Of the three in the race, the winner was — wait for it — Google Vision. Amazon came in second with 77.7 percent “accuracy.” The Orlando Police Department is unlikely to reverse their decision about the Rekognition system. The department appears to have waved goodbye to Rekognition. Microsoft came in “second.”

Here’s the scorecard for the super scientific analysis:

image

One minor point: The context of studies is important. Sample size and other aspects of “context” make a difference. But IBM Watson?

Reseller Agreement Scrutiny

The US government put its pedal to the metal regarding the dominant positions of some high flying US companies. One of these is Amazon./ According to the Verge (which presents the best podcast in the galaxy), Amazon’s reseller deal with Apple is in the spotlight. The Verge reported:

The deal was first announced last fall, ostensibly as a way for Apple to sell on Amazon in an official capacity and cut down on counterfeit or misleadingly marketed products. However, it had the effect of kicking off hundreds of legitimate sellers that were offering low-cost and refurbished Apple products that were no longer for sale by the company itself.

DarkCyber believes that Amazon and Apple may find themselves making more trips to Washington, DC, in the coming months. The investigation comes at a delicate time in the JEDI procurement process. Amazon might lose out to Microsoft, which has some experience in the antitrust arena.

Arrogance and thinking a company is bigger than a government might prove to be an issue. “Senator Wyden Wants Answers from Amazon on Capital One Hack” wants to understand Amazon AWS’s role (or lack of it) in the Capital One data breach. DarkCyber wonders how long Amazon can “just provide a utility service”, leaving the licensees to figure out how to configure, manage, and secure what is the very complex Amazon Web Services “platform.” A wrong answer might have an impact on the $10 billion JEDI contract award. Will Amazon’s “feet on the street” be called on to testify? DarkCyber hopes so.

Amazon and Blockchain

Coverage of Amazon’s digital currency initiatives has been sparse. In our lectures about Amazon’s policeware, the idea of deanonymizing transactions does not compute. Amazon sells eBooks and T shirts, right? DarkCyber noted this story: “Amazon Hints at Putting Advertising Data on a New Blockchain.” The write up states:

The online retailer is looking for a senior software engineer to work in its “Advertising FinTech team focused on a blockchain ledger,” the job listing reads.

DarkCyber finds this interesting. Is there a connection among Amazon’s Ethereum efforts, policeware, and a financial blockchain? Of course not. Amazon sells can openers and customer surveillance devices. No connections.

AWS As an Attack Platform

DarkCyber noted “Phishing Attacks Enlist Amazon AWS, Microsoft Azure in Ploys.” The write up stated:

Recent phishing campaigns have been spotted boosting their anti-detection efforts by using Amazon Web Services to host their landing pages. It’s a sign of a nascent trend towards using public cloud storage, according to researchers.

The cyber security firm Proofpoint may have been the first company to go public with this information.

DarkCyber finds this interesting and “old news.” More information about bad actors’ possible leveraging of the sprawling AWS platform is presented in our for fee lecture “Amazon’s Policeware Platform.”

If this open source write up is accurate, there may be more information released in the near future by “real news” organizations.

AWS and Azure: Alleged Hosts for Ploys

A “ploy” is a nice way of saying malware, scams, and other interesting cyber applications. “Phishing Attacks Enlist Amazon AWS, Microsoft Azure in Ploys” amplifies the Proofpoint message.

Does Amazon Think Some People Are Stupid?

I read “AWS VP: Old Fashioned Resellers Didn’t Truly Understand Cloud.” I am not sure if the person writing this headline paid attention to his or her fourth grade teacher. One of the DarkCyber research team knew a person whose report card conveyed this hand written message to the child’s parents:

Your child did not understand the concept of exploration and Columbus’ discovery of America.

The write up reports that either the AWS executive or the author of the article is a trifle undiplomatic or politically insensitive.

I noted this passage:

“A lot of the old-fashioned resellers didn’t truly understand cloud,” McCann [an Amazon executive] told CRN in a sit-down last week at the Amazon Spheres, on the technology giant’s headquarters campus in Seattle. “Right now…they’re all learning cloud at high speed.” McCann has been overseeing AWS Marketplace, AWS’ digital catalog of software offerings from some 1,400 independent software vendors (ISVs), since late 2014.

The resellers — at least some of the bright ones — are getting on the Bezos bulldozer.

image

“Stay abreast,” enjoins Dave McCann, VP of AWS Market Place. DarkCyber is not sure it can measure up to the lofty standards of a company engaged in such delightful and engaging suggestions.

Plus, the write up reports that the “channel” wants services on the AWS Marketplace. Plus people want to sell software on AWS. And Amazon’s consulting partner business is performing. Amazon is poised to roll out a consulting and services business too. Will Amazon go after the ethically challenged blue-chip and mid-tier consulting firms? Perhaps there is a GLG play in the wings too.

The write up ends with another, almost parental warning:

Channel partners trying to stay abreast of new cloud computing technologies should be boning up on machine learning, the internet of things, containers and serverless, according to McCann.

Well, get with the program and try harder. Ah, the promise of an Amazon echoing with the growl of the Bezos bulldozer drivers.

Is there a detention hall if someone does not “stay abreast”?

Amazon and Child Labor

There many ways to become rich. One of them is to seek out low cost labor. Has Amazon followed this path? DarkCyber does not know. IBI Times published “Amazon to Investigate Child Labour Claims Against China Supplier.” Yep, China. I thought there were some tensions between the US and China. It will be interesting to see how an investigation moves along within the interesting Chinese judicial system. The write up asserts:

Tech giant Amazon will investigate its Chinese supplier Foxconn after reports suggested that it resorted to child labor by hiring schoolchildren and forced them into night shifts and overtime work to meet production targets. The school children were inducted in production lines that were making Amazon Alexa devices including smart speakers. The teenagers worked at overtime and night shifts to attain production quotas for Amazon’s Echo, Echo Dot, and Kindle products.

If Foxconn hired kids to build Amazon gizmos, will Amazon be responsible? Probably not. Think in terms of security and AWS responsibility for a licensee’s technical ineptitude.

Moving production is an option, but won’t the same issue arise in other countries where “low cost” labor supports the US consumer thirst for disposable and frequently outmoded gadgets.

DarkCyber has a question, which is probably not important. It is: Will an Amazon investigation work in the manner of the Boeing safety review?

Worth monitoring.

Ah, the Baltics

Amazon may be heading to the Baltic states. “Report: Amazon Mulls Baltic State AWS Expansion” states:

Amazon has registered subsidiaries in Latvia and Estonia called Amazon Data Services Latvia and ADS Estonia, respectively, suggesting that it could be planning a dedicated cloud region for the Baltic states. While Amazon Web Services regions are spread across the world, the current closest facility to the Baltic states are AWS data centers in Stockholm, Sweden.

Latvia and Estonia are close to Russia. What if Russian companies operating via fronts sign up to do business with AWS? What if the interesting Estonian Russian community leverages the AWS infrastructure for selling gold and providing other services to a third party?

Like the US government, perhaps some of the government agencies in Russia would find ways to leverage Amazon AWS resources. An office in Tallinn’s old town might make it easier to interact with some of the more entrepreneurial Russians who live in the city.

TechRepublic provides some possibly accurate information in “Russian Phishing Campaign Using AWS to Host Landing Pages Designed to Avoid Detection.”

Amazon Earnings: Good or Bad?

DarkCyber does not provide financial or investment advice. We did note the Investor Place write up “This Earnings Disappointment Is Another Chance to Buy Amazon Stock.” The key word is “disappointment.” The write up states as “real news”:

Despite 20% growth in sales year-over-year, earnings failed to meet consensus. While operating income was within guidance, the company missed consensus earnings per share of $5.54 by $0.32. Despite this short-term stumble, Amazon.com Inc. continues to be a cash-generating machine.

Those money people can find a way to turn lemonade into lemons. But there was a ray of sunshine peaking through the dark, threatening clouds:

The company’s operating cash flow for the trailing twelve months is up 65% from the prior year. Long-term, Amazon has the dry powder to fund their continued domination of e-commerce (and beyond).

And how did the “disappointment” affect the bulldozer’s chief driver? Check out the “Cashing In” item below. That may provide some — as the Wall Street whiz kids say — color.

Cashing In

We noted a couple of news items about Jeff Bezos’ selling some stock. For pocket money or to pay PR firms to scatter sparklies around those yacht stories. According to My Broadband, published in South Africa, Mr. Bezos sold shares in Amazon worth $2 billion. Other reports peg the dollar return as higher, but $2 billion is a comfortable number. DarkCyber has that amount tucked in a small piggy bank in the Bank of Harrod’s Creek.

We Won’t Listen… We Promise

Information about how the Amazon appliances pay attention and perform some background operations is getting more coverage in the “real news” media. The unbiased MSPowerUser reported that Amazon allows a customer with an Amazon listening and watching and talking device to opt out of voice recordings and the ultra trustworthy human review process. The write up states:

Amazon has been the first to act definitely by allowing users to opt-out of the review process.

We like “the first.” Amazon is a leader.

Non Competes Make News

Amazon seems to have a keen desire to prevent people from getting a job once an individual goes to work for another company. DarkCyber read “Amazon Sues Former AWS Exec for Joining Rival Google Division As Cloud Wars Escalate.” The main idea is that if a person works for a rival, that individual will, knowingly or unknowingly, reveal secrets. Maybe for a Snowden type. Maybe not for a person with a functional ethical compass. Wait. What’s that word? Ethical. I know. A word destined for the lumber room.

DarkCyber noted this statement:

Seattle has become the battleground in the cloud wars as Amazon’s longtime home, with Microsoft just across Lake Washington in Redmond. Google Cloud is moving into a massive campus down the street from Amazon and the two rivals are not off to a very neighborly start. That’s because competition for cloud workers is fierce and the two companies are now wading in the same shallow talent pool.

DarkCyber thinks that this will be a messy legal battle. When elephants fight, the employees get trampled in our experience.

In an increasingly specialized and rarified discipline like cloud computing, will it be possible for a person never to work again.

Just like old school and probably some new school Hollywood producers allegedly scream at a wandering star: “You will never work in this town again!”

Okay, SNAP benefits and sleeping rough seem to be the goal.

Amazon and Data Lake Formation

Venture Beat published “Amazon Announces General Availability of AWS Lake Formation.” The write up reports:

Amazon … announced general availability of AWS Lake Formation, a fully managed service that facilitates the building, securing, and management of data lakes.

The idea is to perform a sequence of tasks (workflow) to federate content and metadata. Once federated, many functions become possible. The automation of content federation is important to many organizations; for example, the CIA, DHS, and GHCQ. What other companies offer similar automation and ancillary services? Maybe Oracle? Who provides database technology to DHS? DarkCyber does not really know. Maybe Oracle? Maybe Voyager Analytics? We will have to wait for a “real news” outfit to answer this question for us, won’t we?

The Elastic Fabric Adaptor

With a data lake and a fabric adaptor, the AWS offerings are starting to evoke the language of Samuel Taylor Coleridge, the Kubla Khan guy. I read “Scale HPC Workloads with Elastic Fabric Adapter and AWS Parallel Cluster.” This statement was reasonably understandable:

EFA is a network interface for Amazon EC2 instances that enables you to run HPC applications requiring high levels of inter-instance communications (such as computational fluid dynamics, weather modeling, and reservoir simulation) at scale on AWS. It uses an industry-standard operating system bypass technique, with a new custom Scalable Reliable Datagram (SRD) Protocol to enhance the performance of inter-instance communications, which is critical to scaling HPC applications. AWS ParallelCluster takes care of the undifferentiated heavy lifting involved in setting up an HPC cluster with EFA enabled.

The write up provides some step by step instructions for those who did not “bone up” on the wonders of the Byzantine AWS service array. There may be a test on the contents of ~/.parallelcluster/config file.

Amazon Channels IBM Watson Marketing

DarkCyber does not want to make too much of this “me too” approach to sales and marketing. But we noted “Amazon’s AWS Will Help Health Researchers Diagnose Patients and Monitor Disease.” The write up explains:

The company’s Amazon Web Services arm is lending its machine learning technology to the Pittsburgh Health Data Alliance to assist in the development of new technologies around diagnosing patients and monitoring disease.

The write up does mention some of Amazon’s other health initiatives; for example:

Amazon has been increasingly pushing its way into public health, most notably with the formation of Haven, a consortium between itself, JPMorgan, and Berkshire Hathaway to experiment with healthcare systems. Last year, Amazon bought mail-order pharmacy PillPack for $753 million, and this year it made Alexa HIPAA compliant, giving it the ability to transmit patient healthcare data.

What’s not covered is the utility of these data to other Amazon business initiatives. On one hand, that’s typical of “real news.” On the other, the failure to connect the dots with regard to medical fraud is indicative of the lack of understanding some have about the Amazon trajectory.

Partners, Resellers, and Consultants

It may be summertime, but the living is not easy for hard working Amazon centric initiatives. Here’s a selection of announcements in the last week:

CloudHesive is now a premier consulting partner in the Amazon Services Partner Network. Source: Yahoo

GigaSpaces has moved its big data analytics processing platform to Amazon. DarkCyber likes the name: InsightEdge.  Source: Yahoo

Google and Russia: Maybe an Educational Joint Venture for AI?

August 12, 2019

DarkCyber noted Russia’s demand that Google not advertise on YouTube illegal events. The demand was reported by the real news outfit Thomson Reuters. You can read the story at this link. Russia experienced some protests over the weekend. Roscomnadzor, an information watchdog, concluded that YouTube was a vector for dissemination of information about the protests.

WWGD (What would Google do)?

Google does not want to lose traction in the Russian market. Yandex is an issue, and that service seems somewhat compliant.

What are the options?

Google could man up to Russia and refuse. Russia would then take steps to block access to YouTube. Even if those in Russia find a work around, traffic would probably decline. Reduced traffic means less revenue. Plus, irritating Russian regulators could have an impact of Google business, employees, and access to permits.

Google could roll over. Revenues would be preserved, but Google would face direct and indirect pressure to provide more data to Russian authorities. The compliant Google might find itself facing tough decision after tough decision as it tries to preserve revenue and deflect attempts to become a cat’s paw for Russian authorities.

Google could try to craft a China play. On the surface, Google could appear to play hardball. At the same time, the world’s largest search engine finds ways to wedge into a big market. In China, Google has played the education card. A China Google institute for artificial intelligence research has been funded, and it is publishing papers, doing research, and engaging in information sharing.

Which option will Google exercise in Russia?

DarkCyber is not much in the prediction business. But option 3 or “have your cake and it it too but in secret” may be a contender.

The problem for Google is that it operates like a country, and it is not too keen to have its power threatened. But Google does not have a leader like Mr. Putin, nor an army, nor a Roscomnadzor.

Worth watching because it may be difficult to block content that Russia decides is inappropriate. Russia would prefer to control YouTube content available in Russia directly. Google activity is likely to be undesirable. Will Google declare war on Russia, or will it channel Chamberlain?

Stephen E Arnold, August 12, 2019

Amazon Twitch: Curation, Manipulation, or Exploitation Issues?

August 12, 2019

One of the DarkCyber research team plays games. The rest of the group try to ignore the revolution. Someone at Engadget is into games. We determined this by reading “Ninja Calls Out Twitch after His Dormant Channel Highlights Porn.” “Ninja” is an Internet star who plays games. Ninja had a channel or stream on Amazon Twitch. Ninja left Amazon Twitch for Microsoft’s game streaming service. (No, DarkCyber did not know MSFT was into online games, but obviously with a big star like Ninja, MSFT is more than the red ring of death game console.)

The story is a vector for Ninja’s allegations that Amazon Twitch did a bad game player thing. Ninja’s channel — no longer used by Ninja — became a promotional vehicle for other Twitch gamers. The horror apparently was Hollywood all the way. Plus Amazon Twitch’s quite interesting moderation system allowed Ninja’s dormant channel to be to be used by other Twitchers to stream porn. This is bad, it seems, because the Twitch users wanted to watch Ninja play games, not watch actual humanoid interactions.

The write up points out:

We’ve asked Twitch for comment. Whatever its response, this isn’t a great look for the service. It was no surprise that Ninja’s stream would scale back (Twitch partners aren’t allowed to stream on rival services), many only expected it to remain idle, not become a billboard for other broadcasters. It certainly underscores the significance of Ninja’s switch. His leap to Mixer represented a competitive blow, and Twitch clearly wasn’t happy about it. Update 8/11 5:55PM ET: That was fast — Twitch has already reverted Ninja’s old page to a regular offline screen, including chat (where people are roasting Twitch as we write this).

A couple of questions:

  • Does Amazon Twitch have a method to use unused channels to promote other Twitch streams? If so, what is it? Happenstance, a SageMaker function, or a rule book?
  • What will Amazon change to prevent porn from being displayed to the young people who follow popular gamers like Ninja?
  • Does Amazon monetize questionable content; for example, SweetSaltyPeach now banned and brought back as RachelKay and similar streamers who appeal to teen agers?

Amazon Twitch, in its own way, is behaving in a manner which might/could develop into a formal investigation by an appropriate US government entity.

Stephen E Arnold, August 12, 2019

 

Hadoop Fail: A Warning Signal in Big Data Fantasy Land?

August 11, 2019

DarkCyber notices when high profile companies talk about data federation, data lakes, and intelligent federation of real time data with historical data. Examples include Amazon and Anduril to name two companies offering this type of data capability.

What Happened to Hadoop and Where Do We Go from Here?” does not directly discuss the data management systems in Amazon and Anduril, but the points the author highlights may be germane to thinking about what is possible and what remains just out of reach when it comes to processing the rarely defined world of “Big Data.”

The write up focuses on Hadoop, the elephant logo thing. Three issues are identified:

  1. Data provenance was tough to maintain and therefore determine. This is a variation on the GIGO theme (garbage in, garbage out)
  2. Creating a data lake is complicated. With talent shortages, the problem of complexity may hardwire failure.
  3. The big pool of data becomes the focus. That’s okay, but the application to solve the problem is often lost.

Why is a discussion of Hadoop relevant to Amazon and Anduril? The reason is that despite the weaknesses of these systems, both companies are addressing the “Hadoop problem” but in different ways.

These two firms, therefore, may be significant because of their approach and their different angles of attacks.

Amazon is providing a platform which, in the hands of a skilled Amazon technologist, can deliver a cohesive data environment. Furthermore, the digital craftsman can build a solution that works. It may be expensive and possibly flakey, but it mostly works.

Anduril, on the other hand, delivers the federation in a box. Anduril is a hardware product, smart software, and applications. License, deploy, and use.

Despite the different angles of attack, both companies are making headway in the data federation, data lake, and real time analytics sector.

The issue is not what will happen to Hadoop, the issue is how quickly will competitors respond to these different ways of dealing with Big Data.

Stephen E Arnold, August 11, 2019

Google Accused of Favoritism by an Outfit with Google Envy?

August 10, 2019

I read in the Jeff Bezos owned Washington Post this story: “YouTube’s Arbitrary Standards: Stars Keep Making Money Even after Breaking the Rules.” The subtitle is a less than subtle dig at what WaPo perceives as the soft, vulnerable underbelly of Googzilla:

Moderators describe a chaotic workplace where exceptions for lucrative influencers are the norm.

What is the story about? The word choice in the headlines make the message clear: Google is a corrupt, Wild West. The words in the headline and subhead I noted are:

arbitrary

money

breaking

chaotic

exceptions

lucrative

norm.

Is it necessary to work through the complete write up? I have the frame. This is “real news”, which may be as problematic as the high school management methods in operation at Google.

Let’s take a look at a couple of examples of “real news”:

Here’s the unfair angle:

With each crisis, YouTube has raced to update its guidelines for which types of content are allowed to benefit from its powerful advertising engine — depriving creators of those dollars if they break too many rules. That also penalizes YouTube, which splits the advertising revenue with its stars.

Nifty word choice: crisis, race, powerful, dollars, break, and the biggie “advertising revenue.”

That’s it. Advertising revenue. Google has. WaPo doesn’t. Perhaps, just perhaps, Amazon wants. Do you think?

Now the human deciders. Do they decide? WaPo reports the “real news” this way:

But unlike at rivals like Facebook and Twitter, many YouTube moderators aren’t able to delete content themselves. Instead, they are limited to recommending whether a piece of content is safe to run ads, flagging it to higher-ups who make the ultimate decision.

The words used are interesting:

unlike

Facebook

Twitter

aren’t

limited

recommending

higher ups

Okay, that’s enough for me. I have the message.

What if WaPo compared and contrasted YouTube with Twitch, an Amazon owned gaming platform. In my lectures at the TechnoSecurity & Digital Forensics Conference, I showed LE and intel professionals, Twitch’s:

online gambling

soft porn

encoded messages

pirated first run motion pictures

streaming US television programs

Twitch talent can be banned; for example, SweetSaltyPeach. But this star resurfaced with ads a few days later as RachelKay. Same art. Same approach which is designed to appeal the the Twitch audience. How do I know? Well, those pre roll ads and the prompt removal of the ban. Why put RachelKay back on the program? Maybe ad revenue?

My question is, “Why not dive into the toxic gaming culture and the failure of moderation on Twitch?” The focus on Google is interesting, but explaining that problems are particular to Google is interesting.

One thing is certain: The write up is so blatantly anti Google that it is funny.

Why not do a bit of research into the online streaming service of the WaPo’s owner?

Oh, right, that’s not “real news.”

What’s my point? Amazon is just as Googley as Google. Perhaps an editor at the WaPo should check out Twitch before attacking what is not much different than Amazon’s own video service.

Stephen E Arnold, August 10, 2019

Clever or Clumsy? Attempts to Achieve Lock In from Nervous Giants

August 9, 2019

The master of lock in is Amazon. (Lock in means that a company finds a way to ensure that a customer remains a customer. The term, as DarkCyber uses it, refers to the golden age of IBM. Remember that era?)

Apple and Google don’t have the Prime play. But both companies are trying, and their efforts are interesting. DarkCyber finds these “moves” amusing.

First, Apple is going to annoy customers of iPhones who try to get a battery replaced at a non Apple service location. Beta News explains this stroke of genius in “Apple Is Discouraging the Installation of Third Party Batteries by Displaying Battery Health Warnings.” The “you may get harmed” angle is fascinating. The write up states:

While it could be argued that Apple is concerned that iPhone users might install low quality batteries in their handsets, the more cynical response would be that the company is trying to scare people into buying more expensive batteries direct from Apple rather than a third party. This is not the first time Apple has been caught blocking or discouraging the use of third-party components; similar activity has been seen in relation to replacement screens and  home buttons.

With Apple stores becoming less and less friendly, now an iPhone customer has to deal with a click through annoyance and a message from the Apple chief parent. What’s the goal? Simple. Control, money, and interactions with the customer. Yes, some of the ingredients of lock in. Not an Amazon Prime grade play, but it is interesting and a bit sad for some black turtleneck wearers.

Second, the Google has an anti-Prime play. Amazon charges people to become a member of a virtual Costco. Google pays people to join. Here’s how this works if DarkCyber understands the implicit message in “Google Flights Will Offer Money-Back Price Guarantees.” Uber Gizmo states:

Google has announced that they will be introducing a money-back price guarantee feature to Google Flights. This means that you won’t need to worry about finding the best price as Google will refund you the difference. According to Google, “When we predict the price won’t decrease for select itineraries booked between August 13 and September 2, we’ll guarantee the price won’t drop, and we’ll refund you the difference if it does. We’ll monitor the price for you and if the price drops any time before departure, we’ll send you an email letting you know once your flight takes off–so there’s no work on your end.”

Our conclusion: Use our service, and the Google will provide you with an Amazon Prime type benefit for free. Is the benefit free? DarkCyber does not believe that any Google service is “free.” Google wants traffic, and it wants to provide a cash benefit for trusting Mother Google.

What do these two examples suggest?

  1. Prime envy is real
  2. Apple and Google are trying to generate what DarkCyber interprets as “millennial loyalty”
  3. The “plays” are not exactly subtle.

Net net: Apple and Google have adopted “marketing” tactics which call attention to a a subtle shift from a “power” position to a “threatened” position. Prime case examples, right?

Stephen E Arnold, August 9, 2019

Open Source Software: Just So Darned Good

August 9, 2019

The Trump administration’s proscription against doing business with Chinese tech company Huawei has cast a wide net, and one blogger suspects such a net may soon ensnare one of our favorite things. Bunnie’s Blog warns, “Open Source Could Be a Casualty of the Trade War.” The writer checked out Executive Order 13873, and considers how the incredibly broad text could be used to target just about any tech company around the world. They also extensively criticize the technique of weaponizing supply chains and its unintended consequences, so navigate to the blog post to delve into that reasoning.

One of those consequences, they fear, may be the very existence of open-source projects. Huawei, as our immediate example, has contributed significantly to the Linux Foundation. Linux has, so far, escaped the Huawei blacklist net because of a license exemption; however, Bunnie writes:

“Should Huawei be designated as a ‘foreign adversary’ under EO13873, it greatly expands the scope of the ban because it prohibits transactions with entities under the direction or influence of foreign adversaries. The executive order also broadly includes any information technology including hardware and software with no exemption for open source. In fact, it explicitly states that ‘…openness must be balanced by the need to protect our country against critical national security threats’. While the context of ‘open’ in this case refers to an ‘investment climate’, I worry the text is broad enough to easily extend its reach into open source technologies.

We noted this statement too:

“There’s nothing in Github (or any other source-sharing platform) that prevents your code from being accessed by a foreign adversary and incorporated into their technological base, so there is an argument that open source developers are aiding and abetting an enemy by effectively sharing technology with them. Furthermore, in addition to considering requests to merge code from a technical standpoint, one has to also consider the possibility that the requester could be subject to the influence of Huawei, in which case accepting the merge may put you at risk of stiff penalties under the IEEPA (up to $250K for accidental violations; $1M and 20 years imprisonment for willful violations).”

The beauty of open source is, well, its openness. Bunnie argues that if the government gets to decide what entities can contribute and which cannot, the freedom that underpins open source software will vanish.

Cynthia Murrell, August 9, 2019

Google Maps and Blurry Areas

August 9, 2019

Google Maps is an increasingly difficult and frustrating interactive map providing ad delivery.

Google Maps has political and physical views, plus Street View is opaque, falling behind a good old paper map. Due to Google’s wiring of its services, Google Maps can still help people get where they are going, sometimes saving time but possibly creating traffic jams in farms. Google Maps has recorded a good portion of the planet, except some areas, like the Canadian wilderness and and North Korea. Lad Bible investigates, “Google Earth: The Mystery Behind The Areas They Don’t Want You To See.”

North Korea and Area 51 are not the only places you cannot view on Google Earth. Most of them are confidential areas that technically we are not supposed to know exist. They are blocked because governments tell Google to block them or else. When the US government tells you or else, it is usually a good idea to listen. For the other blocked areas, there are conspiracy theories as to why Google will not let them be seen.

Different parts of the world are blocked out like an area in Russia that was possibly a base for nuclear development or a Százhalombattaoil refinery in Hungary that requested to be blurred, but specifically in green. That last one is weird. The top of Kangtega mountain in Nepal is blacked out. Maybe the government wanted to hide a huge pit of dead mountain climbers, but given the amount of bodies piled up on Everest it remains doubtful. The Keowee Dam in South Caroline is pixelated, probably because it supplies hydroelectric power to Oconee Power Plant. Part of Valencia City in the Philippines, home to more than 180,000, is blurred too. Is it a national security reason? Maybe.

The Volkel Air Base in the Netherlands has the most legitimate conspiracy theory about being pixelated on Google Earth:

“There’s actually quite a convincing theory behind this one. The former Prime Minister of the Netherlands, Ruud Lubbers, claimed that there are 22 US nuclear bombs at this site. They are stored in the bunkers of the air bases that feature there. This includes B61 thermonuclear bombs and a device said to be four times as powerful as the bombs dropped on Hiroshima and Nagasaki in 1945. Mr Lubbers featured in a National Geographic documentary and said: “I would never have thought those silly things would still be there in 2013. I think they are an absolutely pointless part of a tradition in military thinking.’”

The most likely and reasonable explanations for these blurred sites are that they are tied to national security and nuclear weapons. One big questions: What is the mechanism between Google and “others” which works out what one can see on a Google Map. We understand the pizza joints. But the blurry areas suggests a higher level interaction. That mechanism is blurry too.

Whitney Grace, August 9, 2019

Google Pumps Cash into DeepMind: A Cost Black Hole Contains Sour Grapes

August 8, 2019

DarkCyber believes that some of the major London newspapers are not wearing happy face buttons when talking about Google. The reasons boil down to money. Google has it in truckloads courtesy of advertising. London newspapers don’t because advertisers love print less these days.

I read “DeepMind Losses Mount as Google Spends Heavily to Win AI Arms Race.” The write up is a good example of bad decisions the now ageing whiz kids are making. Sour grapes? More like sour grapes journalism.

Straight away smart software is going to migrate through many human performed activities. Getting software to work, not send deliveries to the wrong house, pick out the exact person of interest from a sea of faces, and make decisions which are slightly more reliable than the LIBOR folks delivered — this is the future.

The future is expensive unless one gets really lucky. Right, that’s like the “I’m feeling lucky” thing Google provides courtesy of advertisers’ spending.

Back to the bitter vintage write up: The London newspaper states:

Its annual accounts from Companies House show losses of more than £470m in 2018, up from £302m the year before, and its expenses rose from £334m to £568m. Of the £1.03bn due for repayment this year, £883m is owed to parent company Alphabet.

Okay, investments (losses). This is not news. What is news is the tiny hint that there may be some value in looking at the repayments issue? Well, why not look into the tax implications of such inside debts?

Another non news factoid: It costs money to hire people who can make AI work. What about the future of AI if a company does not have smart people? There are some case examples about this type of misstep in non Googley businesses. What are the differences? Similarities? How about a smidgen of research and analysis.

Recycling numbers without context is — to be frank — like a commercial database summarizing an article from a linguistics journal published a year ago. Great for some, but for most, nothing substantive or useful.

Poor Google. The company is investing in a city and country which has the distinction of newspapers which grouse incessantly about a company that’s been around 20 or so years.

Will Google deploy its technology to report the news? Perhaps that would make an interesting write up. Recycling public financial data with a couple of ounces of lousy whine is not satisfying to those in Harrod’s Creek, Kentucky.

Stephen E Arnold, August 8, 2019

« Previous PageNext Page »

  • Archives

  • Recent Posts

  • Meta