Month: October 2018

08 Oct 2018

Looking back at Google+

Google+ is shutting down at last. Google announced today it’s sunsetting its consumer-facing social network due to lack of user and developer adoption, low usage and engagement. Oh, and a data leak. It even revealed how poorly the network is performing, noting that 90 percent of Google+ user sessions are less than five seconds long. Yikes.

But things weren’t always like this. Google+ was once heralded as a serious attempt to topple Facebook’s stranglehold on social networking, and was even met with excitement in its first days.

2011

June: The unveiling

The company originally revealed its new idea for social networking in June 2011. It wasn’t Google’s first foray into social, however. Google had made numerous attempts to offer a social networking service of some sort, with Orkut, launched in 2004 and shuttered in fall 2014; Google Friend Connect in 2008 (retired in 2012); and Google Buzz in 2010 (it closed the next year).

But Google+ was the most significant attempt the company had made, proclaiming at the time: “we believe online sharing is broken.”

The once top-secret project was the subject of several leaks ahead of its launch, allowing consumer interest in the project to build.

Led by Vic Gundotra and Bradley Horowitz, Google’s big idea to fix social was to get users to create groups of contacts — called “Circles” — in order to have more control over social sharing. That is, there are things that are appropriate for sharing with family or close friends, and other things that make more sense to share with co-workers, classmates or those who share a similar interest — like biking or cooking, for example.

But getting users to create groups is difficult because the process can be tedious. Google, instead, cleverly designed a user interface that made organizing contacts feel simpler — even fun, some argued. It also was better than the system for contact organization that Facebook was offering at the time.

Next thing you know, everyone was setting up their Circles by dragging-and-dropping little profile icons into these groups, and posting updates and photos to their newly created micro-networks.

Another key feature, “Sparks,” helped users find news and content related to a user’s particular interests. This way, Google could understand what people liked and wanted to track, without having an established base of topical pages for users to “Like,” as on Facebook. But it also paved the way for a new type of search. Instead of just returning a list of blue links, a search on Google+ could return people’s profiles who were relevant to the topic at hand, matching pages and other content.

Google+ also introduced Hangouts, a way to video chat with up to 10 people in one of your Circles at once.

At the time, the implementation was described as almost magical. This was due to a number of innovative features, like the way the software focused in on the person talking, for example, and the way everyone could share content within a chat.

Early growth looked promising

Within two weeks, it seemed Google had a hit on its hands, as the network had reached 10 million users. Just over a month after launch, it had grown to 25 million. By October 2011, it reached 40 million. And by year-end, 90 million. Even if Google was only tracking sign-up numbers, it still appeared like a massive threat to Facebook.

Facebook CEO Mark Zuckerberg’s first comment about Google+, however, smartly pointed out that any Facebook competitor will have to build up a social graph to be relevant. Facebook, which had 750 million users at the time, had already done this. Google+ was getting the sign-ups, but whether users would remain active over time was still in question.

There also were early signs that Google+’s embrace of non-friends could be challenging. It had to roll out blocking mechanisms months after launch, as the network became too spammy with unwanted notifications. Over the years that followed, its inability to control the spam became a major issue.

Even as late at 2017, people were still complaining that spam made Google+ unusable.

 

July: Backlashes over brands and Real Names policy

In an effort to compete with Facebook, Google+ also enforced a “real names” policy. This angered many users who wanted to use pseudonyms or nicknames, especially when Google began deleting their accounts for non-compliance. This was a larger issue than merely losing social networking access, because losing a Google account meant losing Gmail, Documents, Calendar and access to other Google products, too.

The company also flubbed its handling of brands’ pages, banning all Google business profiles in an ill-conceived fashion — something it later admitted was a mistake.

It wouldn’t fix some of these problems for years, in fact. Eric Schmidt even reportedly once suggested finding another social network if you didn’t want to use your real name — a comment that came across as condescending.

August: Social search

Google+ came to Google Search in August. The company announced Google+ posts would begin appearing in “social search” results that showed when users were signed in. Google called this new toggle “search plus your world.” But its slice of “your world” was pretty limited, as it couldn’t see into the posts shared among your friends and followers on Facebook and Twitter.

2012

January: Forced Google+ account creation

If you can’t beat ’em, force ’em! Google began to require users to have a Google+ account in order to sign up for Gmail. It was not a user-friendly change, and was the start of a number of forced integrations to come.

March: Criticism mounts

TechCrunch’s Devin Coldewey argued that Google failed to play the long game in social, and was too ambitious in its attempt with Google+. All the network really should have started with was its “+1” button — the clicks would generate piles of data tied to users that could then be searchable, private by default and shareable elsewhere.

June: Event spam goes viral

Spam remained an issue on Google+. This time, event spam had emerged, thanks to all the nifty integrations between Google+ and mission-critical products like Calendar.

Users were not thrilled that other people were able to “invite” them to events, and these automatically showed up on your Calendar — even if you had not yet confirmed that you would be attending. It made using Google+ feel like a big mistake.

November: Hangouts evolves

The following year after Google+’s launch, there was already a lot of activity around Hangouts — which interestingly, has since become one of the big products that will outlive its original Google+ home.

Video was a tough space to get right — which is why businesses like Skype were still thriving. And while Hangouts were designed for friends and family to use in Google+, Google was already seeing companies adopt the technology for meetings, and brands like the NBA for connecting with fans.

December: Google+ adds Communities

The focus on user interests in Google+ also continued to evolve this year with the launch of Communities — a way for people to set up topic-based forums on the site. The move was made in hopes of attracting more consumer interest, as growth had slowed.

2013

It’s not a destination; it’s a “social layer!” 

Google+ wasn’t working out as a “Facebook killer.” Engagement was low, distribution was mixed and it seemed it was only being used by tech early adopters, not the mainstream. So the new plan was to double down on Google+ not being a destination website, like Facebook, but rather make it a social layer across Google products.

It had already integrated Google+ with Gmail and Google Contacts, shortly after its launch. In June 2013, it offered a way for people to follow brands’ pages in Gmail.

It then decided to unify Google Talk (aka Gchat) with Google+ Messenger into Hangouts.

It launched a Google+ commenting system for Blogger.

It replaced Google sign-ins on third-party sites with Google+ logins.

It was all a bit much.

September: Google+ infiltrates YouTube

Then, most controversially, it took over YouTube comments. Now, if you wanted to comment on YouTube, you needed a Google+ account.

In other words, if Gmail’s then 200+ million users could juice up Google+, then maybe YouTube’s millions of commenters could, Google hoped.

People were not happy, to say the least.

It was a notable indication of how little love people had for Google+. YouTubers were downright pissed. One girl even crafted a profane music video in response, with lyrics like “You ruined our site and called it integration / I’m writing this song just to vent our frustration / Fuck you, Google Plusssssss!”

Google also started talking about Google+ as an “identity layer” with 500 million users to make it sound big.

2014

April: Vic Gundotra, Father of Google+, leaves Google

Google+ lost its founder. In April 2014, it was announced that Vic Gundotra, the father of Google+, was leaving the company. Google CEO Larry Page said at the time that the social network would still see investment, but it was a signal that a shift was coming in terms of Google’s approach.

Former TechCrunch co-editor Alexia Bonatsos (née Tsotsis) and editor Matthew Panzarino wrote at the time that Google+ was “walking dead,” having heard that Google+ was no longer going to be considered a product, but a platform.

The forced integrations of the past would be walked back, like those in Gmail and YouTube, and teams would be reshuffled.

July: Hangouts breaks free

Perhaps one of the most notable changes was letting Hangouts go free. Hangouts was a compelling product — too important to require a tie to Google+. In July 2014, Hangouts began to work without a Google+ account, rolled out to businesses and got itself an SLA.

July: Google+ drops its “real name” rule and apologizes

Another signal that Google+ was shifting following Gundotra’s exit was when it abandoned its “real name” policy, three years after the user outrage.

While Google had started rolling back on the real name policy in January of 2012 by opening rules to include maiden names and select nicknames, it still displayed your real name alongside your chosen name. It was nowhere near what people wanted.

Now, Google straight-up apologized for its decision around real names and hoped the change would bring users back. It did not. It was too late.

2015

May: Google Photos breaks free

Following Hangouts, Google realized that Google+’s photo-sharing features also deserved to become their own, standalone product.

At Google I/O 2015, the company announced its Google Photos revamp. The new product took advantage of AI and machine learning capabilities that originated on Google+. This included allowing users to search photos for persons, places and things, as well as an update on Google+’s “auto awesome” feature, which turned into the more robust Google Photos Assistant.

Later that year, Google Photos had scaled to 100 million monthly active users, after shutting down Google+ Photos in August 2015.

July: Google+ pulled from YouTube

In July 2015, Google reversed course on YouTube integrations with Google+ so YouTube comments stayed on YouTube, and not on Google+.

People were happy about this. But not happy enough to go back to Google+.

November: An all-new Google+ unveiled

Google+ got a big revamp in November 2015.

Bradley Horowitz, VP, Photos and Streams at Google and Product Director at Google, Luke Wroblewski, had teamed up to redesign Google+ around what Google’s data indicated was working: Communities and Collections. Essentially, the new Google+ was focused on users and their interests. It let people network around topics, but not necessarily their personal connections.

Google also rolled out “About Me” pages as an alternative to sites like About.me.

The new site got a colorful coat of paint, too, but it never regained traction.

2016

January: Google+ pulled from Android Gaming service

Google decoupled Google+ from another core product by dropping the requirement to have an account with the social network in order to use the Google Play Games services.

August: Google+ pulled from Play Store

The unbundling continued, as Google’s Play Store stopped requiring users to have a Google+ account to write reviews.

Horowitz explained at the time that Google had heard from users “that it doesn’t make sense for your Google+ profile to be your identity in all the other Google products you use,” and it was responding accordingly.

August: Hangouts on Air moved to YouTube Live

One of the social network’s last exclusive features, Hangouts on Air — a way to broadcast a Hangout — moved to YouTube Live in 2016, as well.

2017

Google+ went fairly quiet. The site was still there, but the communities were filling with spam. Community moderators said they couldn’t keep up. Google’s inattention to the problem was a signal in and of itself that the grand Google+ experiment may be coming to a close.

January: Classic design phased out

Google+ forced the change over to the new design first previewed in late 2015.

In January 2017, it no longer allowed users to switch back to the old look. It also took the time to highlight groups that were popular on Google+ to counteract the narrative that the site was “dead.” (Even though it was.)

August: Google+ removed share count from +1 button

The once ubiquitous “+1” button, launched in spring 2012, was getting a revamp. It would no longer display the number of shares. Google said this was to make the button load more quickly. But it was really because the share counts were not worth touting anymore.

2018

October 2018: Google+ got its Cambridge Analytica moment

A security bug allowed third-party developers to access Google+ user profile data since 2015 until Google discovered it in March, but decided not to inform users. In total, 496,951 users’ full names, email addresses, birth dates, gender, profile photos, places lived, occupation and relationship status were potentially exposed. Google says it doesn’t have evidence the data was misused, but it decided to shut down the consumer-facing Google+ site anyway, given its lack of use.

Data misuse scandals like Cambridge Analytica have damaged Facebook and Twitter’s reputations, but Google+ wasn’t similarly impacted. After all, Google was no longer claiming Google+ be a social network. And, as its own data shows, the network that remained was largely abandoned.

But the company still had piles of user profile data on hand, which were put at risk. That may lead Google to face a similar fate as the more active social networks, in terms of being questioned by Congress or brought up in lawmakers’ discussions about regulations.

In hindsight, then, maybe it would have been better if Google had shut down Google+ years ago.

08 Oct 2018

Binance will disclose listing fees and donate them to its own charity

The biggest cryptocurrency exchange wants to make its coin listing process a bit less sketchy.

In a Medium post on Monday, the company said that moving forward it would disclose fees that arise in the process of getting a coin listed on the exchange and donate all listing fees to charity. Specifically, its own charity: Blockchain Charity Foundation, “a not-for-profit organization dedicated to the advancement of blockchain-enabled philanthropy towards achieving global sustainable development.”

According to the blog post, Binance will allow any team trying to get listed to name its own fee, which the company now calls a “donation.” Binance says that it will not “dictate” that amount nor is there a minimum fee for a project to get listed.

The decision to open up about its listing fees is likely a response to prior accusations that Binance charged as much as $2.6M for projects that sought to get listed. At the time, the company denied those claims, made on Twitter.

While Binance suggested that it will disclose the amount of “donations” moving forward, it’s certainly possible for money to find its way back out of an in-house charitable arm.

“Binance will continue to use the same high standard for the listing review process,” Binance CEO Changpeng Zhao or “CZ” said in the post. “A large donation does not guarantee or in any way influence the outcome of our listing review process.”

08 Oct 2018

Nubank is now worth $4 billion after Tencent’s $180 million investment

Nubank, the Brazilian financial services company, has raised $180 million from the Chinese internet giant, Tencent.

Tencent has long been interested in financial services startups, and with its $90 million direct investment and another $90 million investment in the secondary market the company now has access to what is arguably the largest digital banking company in the world.

With the $4 billion valuation, it also makes Nubank one of the most highly valued privately held startups in Latin America.

News of the investment was first reported by The Information, which included the $4 billion figure.

For Nubank cofounders David Velez and Cristina Junqueira, the investment from Tencent means the addition of a strategic partner whose financial services products and transaction platform is unmatched by anything in Western Europe or the U.S.

Velez stressed that Nubank, which had raised $150 million in a February financing round led by DST, did not need the additional capital. “We found so much value in partnering with Tencent,” Velez said. “Particularly everything there is to learn about the Chinese financial market.”

Velez hopes to take those lessons and apply them back to the market in Brazil. China is in the forefront of financial services globally because of its technology companies’ ability to offer multi-product platforms. “They have built the playbook of how to use mobile.”

Through the investment, Tencent will gain an understanding of how Nubank has managed to service 5 million credit card holders, and the gameplan the company is deploying to develop its own savings accounts and other banking services.

“Over 20 million people have applied for the card,” said Velez. “There are active, engaged, customers that want to get everything from us.”

Junqueira estimates that the company will soon be able to serve tens of millions of Brazilians with either a savings account, a checking account, or credit.

The opportunity could be even bigger as Brazil’s central bank investigates the possibility of instant payments as well, looking to India’s experiment with demonetization as an example.

Both Junqueira and Velez said that the opportunity for financial services startups to achieve significant scale was far higher in emerging markets like Brazil than in developed markets, since the barriers to banking are so much higher.

Financial services, Velez said, has been controlled by massive oligopolies that have erected unfair obstacles to wealth creation for the masses. Nubank and other companies like it are working to change that.

Now the company has the benefit of Tencent’s guidance as it continues to push the envelope.

 

08 Oct 2018

Facebook, are you kidding?

Facebook is making a video camera. The company wants you to take it home, gaze into its single roving-yet-unblinking eye and speak private thoughts to your loved ones into its many-eared panel.

The thing is called Portal and it wants to live on your kitchen counter or in your living room or wherever else you’d like friends and family to remotely hang out with you. Portal adjusts to keep its subject in frame as they move around to enable casual at-home video chat. The device minimizes background noise to boost voice clarity. These tricks are neat but not revelatory.

Sounds useful, though. Everyone you know is on Facebook. Or they were anyway… things are a bit different now.

Facebook, champion of bad timing

As many users are looking for ways to compartmentalize or scale back their reliance on Facebook, the company has invited itself into the home. Portal is voice activated, listening for a cue-phrase (in this case “Hey Portal), and leverages Amazon’s Alexa voice commands as well. The problem is that plenty of users are already creeped out enough by Alexa’s always-listening functionality and habit of picking up snippets of conversation from the next room over. It may have the best social graph in the world, but in 2018 people are looking to use Facebook for less — not more.

Facebook reportedly planned to unveil Portal at F8 this year but held the product back due to the Cambridge Analytica scandal, among other scandals. The fact that the company released the devices on the tail end of a major data breach disclosure suggests that the company couldn’t really hold back the product longer without killing it altogether and didn’t see a break in the clouds coming any time soon. Facebook’s Portal is another way for Facebook to blaze a path that its users walk daily to connect to one another. Months after its original intended ship date, the timing still couldn’t be worse.

Over the last eight years Facebook insisted time and time again that it is not and never would be a hardware company. I remember sitting in the second row at a mysterious Menlo Park press event five years ago as reporters muttered that we might at last meet the mythological Facebook phone. Instead, Mark Zuckerberg introduced Graph Search.

It’s hard to overstate just how much better the market timing would have been back in 2013. For privacy advocates, the platform was already on notice, but most users still bobbed in and out of Facebook regularly without much thought. Friends who’d quit Facebook cold turkey were still anomalous. Soul-searching over social media’s inexorable impact on social behavior wasn’t quite casual conversation except among disillusioned tech reporters.

Trusting Facebook (or not)

Onion headline-worthy news timing aside, Facebook showed a glimmer of self awareness, promising that Portal was “built with privacy and security in mind.” It makes a few more promises:

“Facebook doesn’t listen to, view, or keep the contents of your Portal video calls. Your Portal conversations stay between you and the people you’re calling. In addition, video calls on Portal are encrypted, so your calls are always secure.”

“For added security, Smart Camera and Smart Sound use AI technology that runs locally on Portal, not on Facebook servers. Portal’s camera doesn’t use facial recognition and doesn’t identify who you are.”

“Like other voice-enabled devices, Portal only sends voice commands to Facebook servers after you say, “Hey Portal.” You can delete your Portal’s voice history in your Facebook Activity Log at any time.”

This stuff sounds okay, but it’s standard. And, like any Facebook product testing the waters before turning the ad hose on full-blast, it’s all subject to change. For example, Portal’s camera doesn’t identify who you are, but Facebook commands a powerful facial recognition engine and is known for blurring the boundaries between its major products, a habit that’s likely to worsen with some of the gatekeepers out of the way.

Facebook does not command a standard level of trust. To recover from recent lows, Facebook needs to establish an extraordinary level of trust with users. A fantastic level of trust. Instead, it’s charting new inroads into their lives.

Hardware is hard. Facebook isn’t a hardware maker and its handling of Oculus is the company’s only real trial with the challenges of making, marketing — and securing — something that isn’t a social app. In 2012, Zuckerberg declared that hardware has “always been the wrong strategy” for Facebook. Two years later, Facebook bought Oculus, but that was a bid to own the platform of the future after missing the boat on the early mobile boom — not a signal that Facebook wanted to be a hardware company.

Reminder: Facebook’s entire raison d’être is to extract personal data from its users. For intimate products — video chat, messaging, kitchen-friendly panopticons — it’s best to rely on companies with a business model that is not diametrically opposed to user privacy. Facebook isn’t the only one of those companies (um, hey Google) but Facebook’s products aren’t singular enough to be worth fooling yourself into a surfeit of trust.

Gut check

Right now, as consumers, we only have so much leverage. A small handful of giant tech companies — Facebook, Apple, Amazon, Google and Microsoft — make products that are ostensibly useful and we decide how useful they are and how much privacy we’re willing to trade to get them. That’s the deal and the deal sucks.

As a consumer it’s worth really sitting with that. Which companies do you trust the least? Why?

It stands to reason that if Facebook cannot reliably secure its flagship product — Facebook itself — then the company should not be trusted with experimental forays into wildly different products, i.e. physical ones. Securing a software platform that serves 2.23 billion users is an extremely challenging task, and adding hardware to that equation just complicates existing concerns.

You don’t have to know the technical ins and outs of security to make secure choices. Trust is leverage — demand that it be earned. If a product doesn’t pass the smell test, trust that feeling. Throw it out. Better yet, don’t invite it onto your kitchen counter to begin with.

If we can’t trust Facebook to safely help us login to websites or share news stories, why should we trust Facebook to move an always-on counter-mounted speaker capable of collecting incredibly sensitive data into our homes? Tl; dr: We shouldn’t! Of course we shouldn’t. But you knew that.

08 Oct 2018

The Casio Rangeman GPR-B1000 is a big watch for big adventures

The Casio Rangeman GPR-B1000 is comically large. That’s the first thing you notice about it. Based on the G-Shock design, this massive watch is 20.2mm thick and about 60mm in diameter, a true dinner plate of a watch. Inside the heavy case is a dense collection of features that will make your next outdoor adventure great.

GPR-B1000, which I took for an extended trip through Utah and Nevada, is an outdoor marvel. It has all of the standard hiking watch features including compass, barometer, altimeter, and solar charging, but the watch also has built-in GPS mapping, logging, and backtracking. This means you can set a destination and the watch will lead you and you can later use your GPS data to recreate your trek or even backtrack out of a sticky situation.

This is not a sports watch. It won’t track your runs or remind you to go to your yoga class. Instead it’s aimed at the backwoods hiker or off piste skier who wants to get from Point A to Point B without getting lost. The watch connects to a specialized app that lets you set the destinations, map your routes, and even change timezones when the phone wakes up after a flight. These odd features make this a traveler’s dream.

The watch design is also unique for Casio. Instead of a replaceable battery the device charges via sunlight or with an included wireless charger. It has a ceramic caseback – a first for Casio – and the charger fits on like a plastic parasite. It charges via micro USB.

It has a crown on the side that controls scrolling through various on-screen menus and the rest of the functions are accessed easily from dedicated buttons around the bezel. The watch is mud- and water-proof to 200 meters and it can survive in minus 20 degrees Celsius temperatures. It is also shock resistant.

The $800 GPR-B1000 is a beefy watch. It’s not for the faint of wrist and definitely requires a bit of dedication to wear. I loved it while hiking up and down canyons and mountains and it was an excellent travel companion. One of the coolest features is quite simply being able to trust that the timezone is correct as soon as you land in Europe from New York.

That said you should remember that this watch is for “Adventure Survival” as Casio puts it. It’s not a running watch and it’s not a fashion piece. At $800 it’s one of Casio’s most expensive G-Shocks and it’s also the most complex. If you’re an avid hiker, however, the endless battery, GPS, and trekking features make it a truly valuable asset.

[gallery ids="1728822,1728820,1728819"]
08 Oct 2018

Here’s how Google is revamping Gmail and Android security

Eager to change the conversation from their years-long exposure of user data via Google+ to the bright, shining future the company is providing, Google has announced some changes to the way permissions are approved for Android apps. The new process will be slower, more deliberate and hopefully secure.

The changes are part of “Project Strobe,” a “root-and-branch review of third-party developer access to Google account and Android device data and our philosophy around apps’ data access.” Essentially they decided it was time to update the complex and likely not entirely cohesive set of rules and practices around those third-party developers and API access.

One of those roots (or perhaps branches) was the bug discovered inside Google+, which theoretically (the company can’t tell if it was abused or not) exposed non-public profile data to apps that should have received only a user’s public profile. This, combined with the fact that Google+ never really justified its own existence in the first place, led to the service essentially being shut down. “The consumer version of Google+ currently has low usage and engagement,” Google admitted. “90 percent of Google+ user sessions are less than five seconds.”

But the team doing the review has plenty of other suggestions to improve the process of informed consent to sharing data with third parties.

The first change is the most user-facing. When an application wants to access your Google account data — say your Gmail, Calendar and Drive contents for a third-party productivity app — you’ll have to approve each one of those separately. You’ll also have the opportunity to deny access to one or more of those requests, so if you never plan on using the Drive functionality, you can just nix it and the app will never get that permission.

These permissions can also be delayed and gated behind the actions that require them. For instance, if this theoretical app wanted to give you the opportunity to take a picture to add to an email, it wouldn’t have to ask up front when you download it. Instead, when you tap the option to attach a picture, it would ask permission to access the camera then and there. Google went into a little more detail on this in a post on its developer blog.

Notably there is only the option to “deny” or “allow,” but no “deny this time” or “allow this time,” which I find to be useful when you’re not totally on board with the permission in question. You can always revert the setting manually, but it’s nice to have the option to say “okay, just this once, strange app.”

The changes will start rolling out this month, so don’t be surprised if things look a little different next time you download a game or update an app.

The second and third changes have to do with limiting which data from your Gmail and messaging can be accessed by apps, and which apps can be granted access in the first place.

Specifically, Google is restricting access to these sensitive data troves to apps “directly enhancing email functionality” for Gmail and your default calling and messaging apps for call logs and SMS data.

There are some edge cases where this might be annoying to power users; some have more than one messaging app that falls back to SMS or integrates SMS replies, and this might require those apps to take a new approach. And apps that want access to these things may have trouble convincing Google’s review authorities that they qualify.

Developers also will need to review and agree to a new set of rules governing what Gmail data can be used, how they can use it and the measures they must have in place to protect it. For example, apps are not allowed to “transfer or sell the data for other purposes such as targeting ads, market research, email campaign tracking, and other unrelated purposes.” That probably puts a few business models out of the running.

Apps looking to handle Gmail data will also have to submit a report detailing “application penetration testing, external network penetration testing, account deletion verification, reviews of incident response plans, vulnerability disclosure programs, and information security policies.” No fly-by-night operations permitted, clearly.

There also will be additional scrutiny on what permissions developers ask for to make sure it matches up with what their app requires. If you ask for Contacts access but don’t actually use it for anything, you’ll be asked to remove that, as it only increases risk.

These various new requirements will go into effect next year, with application review (a multi-week process) starting on January 9; tardy developers will see their apps stop working at the end of March if they don’t comply.

The relatively short timeline here suggests that some apps may in fact shut down temporarily or permanently due to the rigors of the review process. Don’t be surprised if early next year you get an update saying service may be interrupted due to Google review policies or the like.

These changes are just the first handful issuing from the recommendations of Project Strobe; we can expect more to appear over the next few months, though perhaps not such striking ones. To say Gmail and Android apps are widely used is something of an understatement, so it’s understandable that they would be focused on first, but there are many other policies and services the company will no doubt find reason to improve.

08 Oct 2018

Machinify raises $10 million to help businesses use AI to monetize data

Data is valuable — if you know how to access it and reap the insights from it. That’s where Machinify comes in. The artificial intelligence company just raised a $10 million Series A round led by Battery Ventures with participation from GV and Matrix Partners.

“Our core notion is that today, enterprises are collecting a ton of data,” Machinify founder and CEO Prasanna Ganesan told TechCrunch. “But if you look at how many of them are successful in turning it into smarter decision-making to drive efficiency, very few companies are succeeding.”

With Machinify, enterprise customers feed the system raw data, specify what they’re trying to optimize for — whether that be revenue or some other goal — and then the machine figures out what to do from there. Based on past decisions, the machine can figure out the right thing to do, Ganesan said.

A good example of how companies use Machinify is in the healthcare space, where businesses are using the tool to increase the accuracy and speed with which they process claims. By doing so, these companies have been able to increase revenue and reduce costs.

“Machinify is laser-focused on the critical operational issues created by the deployment of what we often call Software 2.0 within enterprises,” GV general partner Adam Ghoborah said in a statement. “Software 2.0 is software that is not written by humans like traditional software but is dynamically driven by AI models and large enterprise datasets. Software 2.0 requires a completely different approach, and we believe that the Machinify platform holds the key to unlocking its value.”

08 Oct 2018

Google+ to shut down after coverup of data breach

Google is about to have its Cambridge Analytica moment. A security bug allowed third-party developers to access Google+ user profile data since 2015 until Google discovered and patched it in March, but decided not to inform the world. When a user gave permission to an app to access their public profile data, the bug also let those developers pull they and their friends’ non-public profile fields. 496,951 users’ full names, email addresses, birth dates, gender, profile photos, places lived, occupation and relationship status were potentially exposed, though Google says it has no evidence the data was misused by the 438 apps that could have had access.

The company decided against informing the public because it would lead to “us coming into the spotlight alongside or even instead of Facebook despite having stayed under the radar throughout the Cambridge Analytica scandal” according to an internal memo. Now Google+, which was already a ghost town largely abandoned or never inhabited by users, has become a massive liability for the company.

The news comes from a damning Wall Street Journal report that said Google is expected to announce a slew of privacy reforms today in response to the breach. Google made that announcement about the findings of its Project Strobe security audit minutes after the WSJ report was published. The changes include stopping most third-party developers from accessing Android phone SMS data, call logs, and some contact info. Gmail will restrict building add-ons to a small number of developers. Google+ will cease all its consumer services while winding down over the next 10-months with an opportunity for users to export their data while Google refocuses on making G+ an enterprise product.

Google will also change its Account Permissions system for giving third-party apps access to your data such that you have to confirm each type of access individually rather than all at once. Gmail Add-Ons will be limited to those “directly enhancing email functionality”, including email clients, backup, CRM, mail merge, and productivity tools.

90 percent of Google+ sessions were less than 5 seconds

Embarrasingly, Google’s admits that “This review crystallized what we’ve known for a while: that while our engineering teams have put a lot of effort and dedication into building Google+ over the years, it has not achieved broad consumer or developer adoption, and has seen limited user interaction with apps. The consumer version of Google+ currently has low usage and engagement: 90 percent of Google+ user sessions are less than five seconds.” For more on G+’s demise, read our 2014 take on the beginning of the end.

Since the bug and subquent security hole started in 2015 and was discovered in March before Europe’s GDPR went into effect in May, Google will likely be spared a 2 percent of global annual revenue fine for failing to disclose the issue within 72 hours. The company could still face class-action lawsuits and public backlash. On the bright side, G+ posts and messages, Google account data and phone numbers, and G Suite enterprise content wasn’t exposed.

The fiasco could thrust Google into the same churning sea of scrutiny currently drowning Facebook, just as the company feared. Google has managed to float above much of the criticism leveled at Facebook and Twitter, in part by claiming it’s not really a social network. But now its failed Facebook knock-off from seven years ago could drag down the search giant and see it endure increasingly calls for testimony before congress and regulation.

08 Oct 2018

In letter to Congress, Apple sends strongest denial over ‘spy chip’ story

Apple has doubled down on its repudiation of Bloomberg’s report last week that claimed its systems had been compromised by Chinese spies.

The blockbuster story cited more than a dozen sources claiming that China installed tiny chips on motherboards built by Supermicro, which companies across the U.S. tech industry — including Amazon and Apple — have used to power servers in their datacenters. Bloomberg’s report also claimed that the chip can reportedly compromise data on the server, allowing China to spy on some of the world’s most powerful tech companies.

Now, in a letter to Congress, Apple’s vice president of information security George Stathakopoulos sent the company’s strongest denial to date.

“Apple has never found malicious chips, ‘hardware manipulations’ or vulnerabilities purposely planted in any server,” he said. “We never alerted the FBI to any security concerns like those described in the article, nor has the FBI ever contacted us about such an investigation.”

It follows a statement by both the U.K. National Cyber Security Center and U.S. Homeland Security stating that they had “no reason to doubt” statements by Apple, Amazon and Supermicro denying the claims.

Stathakopoulos added that Apple “repeatedly asked them to share specific details about the alleged malicious chips that they seemed certain existed, they were unwilling or unable to provide anything more than vague secondhand accounts.”

Apple’s statement is far stronger than its earlier remarks. A key detail missing in the Bloomberg story is that its many sources, albeit anonymous, provided the reporters with a first hand account of the alleged spy chips.

Without any evidence that the chips exist beyond eyewitness accounts and sources, Bloomberg’s story remains on shaky grounds.

08 Oct 2018

Humbition is a new fund led by the Indiegogo’s Slava Rubin

Zocdoc founder Cyrus Massoumi and Indiegogo founder Slava Rubin have created a new $30 million fund called Humbition aimed at early stage, founder-led companies in New York.

“The fund is focused on connecting startups with investors and advisors experienced in building and growing successful businesses,” said Rubin.

“We are seeking to fill a void in NYC, where the vast majority of early stage investors have no significant experience building and scaling businesses,” he said. “The fund’s main areas of investment include marketplaces, consumer and health tech. But the primary criteria for investments is high quality founders. The fund is also seeking out mission-driven businesses because the companies that are socially responsible will be the most successful in the coming decades.”

The fund has brought on ClassPass founder Payal Kadakia, Warby Parker founder Neil Blumenthal, Charity: Water CEO and founder Scott Harrison, and Casper founder and CEO Philip Krim as advisors. They have already invested some of the $30 million raise in Burrow, a couch-on-demand service.

“New York City is home to a tremendous number of mission-driven startups that are simply not receiving the same level of support as their peers in the Bay Area. This void presents a unique opportunity for humbition to reach the incredible local talent who need the funding and guidance to build and grow their businesses in New York City,” said Rubin.