Year: 2019

06 Feb 2019

Sonos CFO Michael Giannetto will retire later this year

At the tail end of its shareholder letter for Q1 2019, Sonos disclosed that the company’s chief financial officer, Mike Giannetto, will be retiring “later this year.” Giannetto has been with Sonos for seven years, helping to guide the company through its IPO back in August of 2018.

As for who will take over the role: Sonos isn’t sure yet. They’ve hired a search firm to help them find a new CFO, but CEO Patrick Spence writes that Giannetto “will help with that search and be around as long as we need him to ensure a smooth transition.”

Sonos stock dipped by about 17 percent immediately after the news was announced (from $12.37 at market close to $10.42 after hours) but has climbed its way back up a bit to around $11.76 per share.

Story developing…

06 Feb 2019

Many popular iPhone apps secretly record your screen without asking

Many major companies, like Air Canada, Hollister and Expedia, are recording every tap and swipe you make on their iPhone apps. In most cases you won’t even realize it. And they don’t need to ask for permission.

You can assume that most apps are collecting data on you. Some even monetize your data without your knowledge. But TechCrunch has found several popular iPhone apps, from hoteliers, travel sites, airlines, cell phone carriers, banks and financiers, that don’t ask or make it clear — if at all — that they know exactly how you’re using their apps.

Worse, even though these apps are meant to mask certain fields, some inadvertently expose sensitive data.

Apps like Abercrombie & Fitch, Hotels.com and Singapore Airlines also use Glassbox, a customer experience analytics firm, one of a handful of companies that allows developers to embed “session replay” technology into their apps. These session replays let app developers record the screen and play them back to see how its users interacted with the app to figure out if something didn’t work or if there was an error. Every tap, button push and keyboard entry is recorded — effectively screenshotted — and sent back to the app developers.

Or, as Glassbox said in a recent tweet: “Imagine if your website or mobile app could see exactly what your customers do in real time, and why they did it?”

The App Analyst, a mobile expert who writes about his analyses of popular apps on his eponymous blog, recently found Air Canada’s iPhone app wasn’t properly masking the session replays when they were sent, exposing passport numbers and credit card data in each replay session. Just weeks earlier, Air Canada said its app had a data breach, exposing 20,000 profiles.

“This gives Air Canada employees — and anyone else capable of accessing the screenshot database — to see unencrypted credit card and password information,” he told TechCrunch.

In the case of Air Canada’s app, although the fields are masked, the masking didn’t always stick (Image: The App Analyst/supplied)

We asked The App Analyst to look at a sample of apps that Glassbox had listed on its website as customers. Using Charles Proxy, a man-in-the-middle tool used to intercept the data sent from the app, the researcher could examine what data was going out of the device.

Not every app was leaking masked data; none of the apps we examined said they were recording a user’s screen — let alone sending them back to each company or directly to Glassbox’s cloud.

That could be a problem if any one of Glassbox’s customers aren’t properly masking data, he said in an email. “Since this data is often sent back to Glassbox servers I wouldn’t be shocked if they have already had instances of them capturing sensitive banking information and passwords,” he said.

The App Analyst said that while Hollister and Abercrombie & Fitch sent their session replays to Glassbox, others like Expedia and Hotels.com opted to capture and send session replay data back to a server on their own domain. He said that the data was “mostly obfuscated,” but did see in some cases email addresses and postal codes. The researcher said Singapore Airlines also collected session replay data but sent it back to Glassbox’s cloud.

Without analyzing the data for each app, it’s impossible to know if an app is recording a user’s screens of how you’re using the app. We didn’t even find it in the small print of their privacy policies.

Apps that are submitted to Apple’s App Store must have a privacy policy, but none of the apps we reviewed make it clear in their policies that they record a user’s screen. Glassbox doesn’t require any special permission from Apple or from the user, so there’s no way a user would know.

Expedia’s policy makes no mention of recording your screen, nor does Hotels.com’s policy. And in Air Canada’s case, we couldn’t spot a single line in its iOS terms and conditions or privacy policy that suggests the iPhone app sends screen data back to the airline. And in Singapore Airlines’ privacy policy, there’s no mention, either.

We asked all of the companies to point us to exactly where in its privacy policies it permits each app to capture what a user does on their phone.

Only Abercombie responded, confirming that Glassbox “helps support a seamless shopping experience, enabling us to identify and address any issues customers might encounter in their digital experience.” The spokesperson pointing to Abercrombie’s privacy policy makes no mention of session replays, neither does its sister-brand Hollister’s policy.

“I think users should take an active role in how they share their data, and the first step to this is having companies be forthright in sharing how they collect their users data and who they share it with,” said The App Analyst.

When asked, Glassbox said it doesn’t enforce its customers to mention its usage in their privacy policy.

“Glassbox has a unique capability to reconstruct the mobile application view in a visual format, which is another view of analytics, Glassbox SDK can interact with our customers native app only and technically cannot break the boundary of the app,” the spokesperson said, such as when the system keyboard covers part of the native app, “Glassbox does not have access to it,” the spokesperson said.

Glassbox is one of many session replay services on the market. Appsee actively markets its “user recording” technology that lets developers “see your app through your user’s eyes,” while UXCam says it lets developers “watch recordings of your users’ sessions, including all their gestures and triggered events.” Most went under the radar until Mixpanel sparked anger for mistakenly harvesting passwords after masking safeguards failed.

It’s not an industry that’s likely to go away any time soon — companies rely on this kind of session replay data to understand why things break, which can be costly in high-revenue situations.

But for the fact that the app developers don’t publicize it just goes to show how creepy even they know it is.


Got a tip? You can send tips securely over Signal and WhatsApp to +1 646-755–8849. You can also send PGP email with the fingerprint: 4D0E 92F2 E36A EC51 DAAE 5D97 CB8C 15FA EB6C EEA5.

06 Feb 2019

Many popular iPhone apps secretly record your screen without asking

Many major companies, like Air Canada, Hollister and Expedia, are recording every tap and swipe you make on their iPhone apps. In most cases you won’t even realize it. And they don’t need to ask for permission.

You can assume that most apps are collecting data on you. Some even monetize your data without your knowledge. But TechCrunch has found several popular iPhone apps, from hoteliers, travel sites, airlines, cell phone carriers, banks and financiers, that don’t ask or make it clear — if at all — that they know exactly how you’re using their apps.

Worse, even though these apps are meant to mask certain fields, some inadvertently expose sensitive data.

Apps like Abercrombie & Fitch, Hotels.com and Singapore Airlines also use Glassbox, a customer experience analytics firm, one of a handful of companies that allows developers to embed “session replay” technology into their apps. These session replays let app developers record the screen and play them back to see how its users interacted with the app to figure out if something didn’t work or if there was an error. Every tap, button push and keyboard entry is recorded — effectively screenshotted — and sent back to the app developers.

Or, as Glassbox said in a recent tweet: “Imagine if your website or mobile app could see exactly what your customers do in real time, and why they did it?”

The App Analyst, a mobile expert who writes about his analyses of popular apps on his eponymous blog, recently found Air Canada’s iPhone app wasn’t properly masking the session replays when they were sent, exposing passport numbers and credit card data in each replay session. Just weeks earlier, Air Canada said its app had a data breach, exposing 20,000 profiles.

“This gives Air Canada employees — and anyone else capable of accessing the screenshot database — to see unencrypted credit card and password information,” he told TechCrunch.

In the case of Air Canada’s app, although the fields are masked, the masking didn’t always stick (Image: The App Analyst/supplied)

We asked The App Analyst to look at a sample of apps that Glassbox had listed on its website as customers. Using Charles Proxy, a man-in-the-middle tool used to intercept the data sent from the app, the researcher could examine what data was going out of the device.

Not every app was leaking masked data; none of the apps we examined said they were recording a user’s screen — let alone sending them back to each company or directly to Glassbox’s cloud.

That could be a problem if any one of Glassbox’s customers aren’t properly masking data, he said in an email. “Since this data is often sent back to Glassbox servers I wouldn’t be shocked if they have already had instances of them capturing sensitive banking information and passwords,” he said.

The App Analyst said that while Hollister and Abercrombie & Fitch sent their session replays to Glassbox, others like Expedia and Hotels.com opted to capture and send session replay data back to a server on their own domain. He said that the data was “mostly obfuscated,” but did see in some cases email addresses and postal codes. The researcher said Singapore Airlines also collected session replay data but sent it back to Glassbox’s cloud.

Without analyzing the data for each app, it’s impossible to know if an app is recording a user’s screens of how you’re using the app. We didn’t even find it in the small print of their privacy policies.

Apps that are submitted to Apple’s App Store must have a privacy policy, but none of the apps we reviewed make it clear in their policies that they record a user’s screen. Glassbox doesn’t require any special permission from Apple or from the user, so there’s no way a user would know.

Expedia’s policy makes no mention of recording your screen, nor does Hotels.com’s policy. And in Air Canada’s case, we couldn’t spot a single line in its iOS terms and conditions or privacy policy that suggests the iPhone app sends screen data back to the airline. And in Singapore Airlines’ privacy policy, there’s no mention, either.

We asked all of the companies to point us to exactly where in its privacy policies it permits each app to capture what a user does on their phone.

Only Abercombie responded, confirming that Glassbox “helps support a seamless shopping experience, enabling us to identify and address any issues customers might encounter in their digital experience.” The spokesperson pointing to Abercrombie’s privacy policy makes no mention of session replays, neither does its sister-brand Hollister’s policy.

“I think users should take an active role in how they share their data, and the first step to this is having companies be forthright in sharing how they collect their users data and who they share it with,” said The App Analyst.

When asked, Glassbox said it doesn’t enforce its customers to mention its usage in their privacy policy.

“Glassbox has a unique capability to reconstruct the mobile application view in a visual format, which is another view of analytics, Glassbox SDK can interact with our customers native app only and technically cannot break the boundary of the app,” the spokesperson said, such as when the system keyboard covers part of the native app, “Glassbox does not have access to it,” the spokesperson said.

Glassbox is one of many session replay services on the market. Appsee actively markets its “user recording” technology that lets developers “see your app through your user’s eyes,” while UXCam says it lets developers “watch recordings of your users’ sessions, including all their gestures and triggered events.” Most went under the radar until Mixpanel sparked anger for mistakenly harvesting passwords after masking safeguards failed.

It’s not an industry that’s likely to go away any time soon — companies rely on this kind of session replay data to understand why things break, which can be costly in high-revenue situations.

But for the fact that the app developers don’t publicize it just goes to show how creepy even they know it is.


Got a tip? You can send tips securely over Signal and WhatsApp to +1 646-755–8849. You can also send PGP email with the fingerprint: 4D0E 92F2 E36A EC51 DAAE 5D97 CB8C 15FA EB6C EEA5.

06 Feb 2019

Weather and climate-related disasters cost the US $80 billion in 2018, but go ahead and say climate change isn’t real

Weather and climate-related disasters cost the U.S. economy $80 billion last year — and have hit the nation’s bottom line to the tune of roughly $100 billion per year over the last five years, according to a new survey from the National Oceanic and Atmospheric Administration.

That tally comes as NASA reported that 2018 was also the fourth warmest year ever recorded — continuing a trend of record-breaking global temperatures.

It looks like the anthropogenic causes of climate change are becoming harder to ignore.

Indeed, the NOAA’s Climate.gov report was very blunt about the causes of the increasing frequency with which natural disasters are occurring across the country:

The past three years (2016-2018) have been historic, with the annual average number of billion-dollar disasters being more than double the long-term average. The number and cost of disasters are increasing over time due to a combination of increased exposure, vulnerability, and the fact the climate change is increasing the frequency of some types of extremes that lead to billion-dollar disasters.

In total, the U.S. was hit by 14 separate disaster events whose costs were more than $1 billion: the litany of climatological horrors included two tropical cyclones, eight severe storms, two winter storms, prolonged drought and wildfires (that probably burned all the partridges out of their pear trees).

As the NOAA report notes, this tally is the fourth highest number of total events ever recorded — behind 2017 and 2011 (tied at 16 natural disasters) and 2015, which saw 15 natural disasters worth more than $1 billion slam the U.S.

Last year was also one of the costliest for the American economy in terms of the impact from natural disasters. The $80 billion price tag is only topped by 2017, when storms, fires, floods and drought cost the economy $312.7 billion (a record); 2005, when the number hit $220.8 billion and 2012 when $128.6 billion was lost due to climate-related disasters.

Of the events that are the most damaging and costliest to the U.S. economy, hurricanes rank the highest. And from 2016-2018 the U.S. was impacted by six separate hurricanes that cost the economy more than $1 billion. In all, those disasters wrought some $329.9 billion in economic damage and killed 3,138 people.

While there’s a tragic, historic precedence for the damage caused by hurricanes, the Western wildfire seasons of the past two years are unprecedented in size and scope in modern history. With costs running over $40 billion, the wildfire costs in the U.S. for the last two years are equal to the cost from fires for the previous 37 years combined.

Meanwhile, NASA scientists have said that the past five years have been, collectively, the warmest years in the modern record.

“2018 is yet again an extremely warm year on top of a long-term global warming trend,” said GISS Director Gavin Schmidt, in a statement.

Since the 1880s, the average global surface temperature has risen about 2 degrees Fahrenheit — and this warming is caused in large part by increased emissions into the atmosphere of carbon dioxide and other greenhouse gases, Schmidt said.

“The impacts of long-term global warming are already being felt — in coastal flooding, heat waves, intense precipitation and ecosystem change,” said Schmidt, in a statement.

It’s important to note that overall global warming contributes to drastic shifts in climate patterns and climate change. It doesn’t mean that there won’t be conditions of extreme cold as (ahem) some people seem to think.

In fact, global warming hasn’t gone anywhere… yet.

There is a plan being proposed by Democrats in the House of Representatives that aims to push the U.S. to rapidly decarbonize its economy in a bid to offset some of the worst effects that are expected should global temperatures continue to rise (and if anyone wants to send that to me, I’d be obliged).

Given that most reports put a 12-year time frame around reversing the worst impacts of climate change, and U.S. reports put the potential economic damage of unchecked warming at somewhere close to $500 billion, getting a move on toward possible solutions seems like a good idea. Let’s hope Congress can follow through.

 

 

06 Feb 2019

Weather and climate-related disasters cost the US $80 billion in 2018, but go ahead and say climate change isn’t real

Weather and climate-related disasters cost the U.S. economy $80 billion last year — and have hit the nation’s bottom line to the tune of roughly $100 billion per year over the last five years, according to a new survey from the National Oceanic and Atmospheric Administration.

That tally comes as NASA reported that 2018 was also the fourth warmest year ever recorded — continuing a trend of record-breaking global temperatures.

It looks like the anthropogenic causes of climate change are becoming harder to ignore.

Indeed, the NOAA’s Climate.gov report was very blunt about the causes of the increasing frequency with which natural disasters are occurring across the country:

The past three years (2016-2018) have been historic, with the annual average number of billion-dollar disasters being more than double the long-term average. The number and cost of disasters are increasing over time due to a combination of increased exposure, vulnerability, and the fact the climate change is increasing the frequency of some types of extremes that lead to billion-dollar disasters.

In total, the U.S. was hit by 14 separate disaster events whose costs were more than $1 billion: the litany of climatological horrors included two tropical cyclones, eight severe storms, two winter storms, prolonged drought and wildfires (that probably burned all the partridges out of their pear trees).

As the NOAA report notes, this tally is the fourth highest number of total events ever recorded — behind 2017 and 2011 (tied at 16 natural disasters) and 2015, which saw 15 natural disasters worth more than $1 billion slam the U.S.

Last year was also one of the costliest for the American economy in terms of the impact from natural disasters. The $80 billion price tag is only topped by 2017, when storms, fires, floods and drought cost the economy $312.7 billion (a record); 2005, when the number hit $220.8 billion and 2012 when $128.6 billion was lost due to climate-related disasters.

Of the events that are the most damaging and costliest to the U.S. economy, hurricanes rank the highest. And from 2016-2018 the U.S. was impacted by six separate hurricanes that cost the economy more than $1 billion. In all, those disasters wrought some $329.9 billion in economic damage and killed 3,138 people.

While there’s a tragic, historic precedence for the damage caused by hurricanes, the Western wildfire seasons of the past two years are unprecedented in size and scope in modern history. With costs running over $40 billion, the wildfire costs in the U.S. for the last two years are equal to the cost from fires for the previous 37 years combined.

Meanwhile, NASA scientists have said that the past five years have been, collectively, the warmest years in the modern record.

“2018 is yet again an extremely warm year on top of a long-term global warming trend,” said GISS Director Gavin Schmidt, in a statement.

Since the 1880s, the average global surface temperature has risen about 2 degrees Fahrenheit — and this warming is caused in large part by increased emissions into the atmosphere of carbon dioxide and other greenhouse gases, Schmidt said.

“The impacts of long-term global warming are already being felt — in coastal flooding, heat waves, intense precipitation and ecosystem change,” said Schmidt, in a statement.

It’s important to note that overall global warming contributes to drastic shifts in climate patterns and climate change. It doesn’t mean that there won’t be conditions of extreme cold as (ahem) some people seem to think.

In fact, global warming hasn’t gone anywhere… yet.

There is a plan being proposed by Democrats in the House of Representatives that aims to push the U.S. to rapidly decarbonize its economy in a bid to offset some of the worst effects that are expected should global temperatures continue to rise (and if anyone wants to send that to me, I’d be obliged).

Given that most reports put a 12-year time frame around reversing the worst impacts of climate change, and U.S. reports put the potential economic damage of unchecked warming at somewhere close to $500 billion, getting a move on toward possible solutions seems like a good idea. Let’s hope Congress can follow through.

 

 

06 Feb 2019

Why Spotify is betting big on podcasting

Podcasting revenues hit $314 million in 2017, according to a third-party survey released last summer. It’s a large number for what’s been historically regarded as a niche and difficult to monetize medium, but still pales in comparison to the additional $400-$500 million Spotify says it’s willing to spend on the space this year alone.

Two major acquisitions announced early today already comprise a massive commitment to the category. The purchase of Gimlet was reported to have made up nearly half that figure, at $230 million. While no number has been revealed for the purchase of Anchor, Spotify no doubt paid a pretty penny for the buzzy creation/distribution platform, which has raised $14.4 million to date.

What, then, makes Spotify so confident that it will be able to get a return on such a massive investment? To hear the company talk about it, the service fell a bit ass backwards into the whole podcasting phenomenon. For one of the world’s largest audio platforms, Spotify was actually remarkably late to the game. Podcasting dates back at least until 2000, gaining popular momentum around 2004. A year later, Apple began supporting the technology with iTunes 4.9.

After a lengthy beta period, Spotify only opened its podcast submission program to all-comers last October. As Spotify struggles to stay ahead of Apple Music’s looming growth, however, the company is now apparently suddenly all-in on podcasting.

In an interview with TechCrunch, Spotify’s Chief R&D Officer Gustav Söderström admits that the company wasn’t doing a particularly good job serving up podcasting content. “The user experience was really poor,” he says. “There was no 15-second skip. In spite of that, we saw a lot of users listening to podcasts. It was kind of unexpected and we didn’t really understand why. It turned out people really wanted to have podcasts in Spotify with their music. If you look at radio, it’s not that surprising.”

What Spotify discovered was what many no doubt already suspected: Many users don’t necessarily need or want additional applications for all of their different audio types. Even more to the point, Spotify has excelled in one key place many other podcasting platforms have failed: discovery. It’s been a key piece in the company’s growth as the leading music streaming service and could serve to help resolve one of podcasting’s biggest pain points for most users.

Matt Hartman, partner at Betaworks — an early investor in both Gimlet and Anchor — says the massive acquisitions could help signal the beginning of a new wave of podcasting growth.

“This feels like a turning point to a third wave,” Hartman says. “Discovery is a big part of the structural issues that have been in podcasting in the past and with audio in general. And Spotify has a specific solution to that on the music side. Between discovery and monetization, I think that’s where it starts to go from niche to mainstream.”

The same firm that put podcasting revenue at $314 for 2017 forecasts that the number will hit $659 million next year, marking a 110 percent increase. That’s a healthy bump, but still a ways away from returning Spotify’s investment in a category that’s currently split amongst countless different players — including, notably, Apple, whose iPod gave the medium its name.

Eventually, Spotify will monetize podcasts the same way it has music — through subscriptions and ad revenue. In the short term, Spotify will allow both Gimlet and Anchor to operate as they have. Gimlet in particular has demonstrated an ability to make money hand over fist. In addition to raising $28.5 million, the company has devoted a chunk of operations to created sponsored content — using its vast resources to create custom podcasts for brands looking to pay a pretty penny.

When I spoke to Gimlet’s founders following its last major round, they were happy to discuss what’s become a kind of intellectual property machine, having already licensed shows like Alex, Inc. and Homecoming to ABC and Amazon. But building companies and quality content take time. Acquiring them, on the other hand, just takes money — albeit a hell of a lot of it in this case. Spotify was late to the draw, but still hoping to ramp up quickly. So it bought one of the premier players in premium podcasting.

“The question is how much you want to invest, and only history decides if this is right or not,” says Söderström. “We think this is the right time to invest. We could have continued on our own, but we think this is a great acceleration of the strategy we already had […] This was a great chance for us to accelerate the amount of talent we have at Spotify.”

Spotify has long offered some exclusive content from Gimlet and other podcasting studios. It says it will continue to do so here, while making the majority of shows available on all platforms. Ditto for shows created through Anchor, which offers an easy method for pushing out to different services — the company recently claimed it was powering around 40 percent of new podcasts.

Even if these acquisitions do eventually make fiscal sense for Spotify, what does this “third wave” of podcasting ultimately mean for creators? The great promise of podcasting has always been a sort of democratization of content. Anyone with a computer and a microphone can create a podcast. But if the early days of the world wide web have taught us anything, it’s that all things trend toward the corporate in a capitalist society.

Anchor, a plucky startup out of New York, has offered a welcome respite, bringing novice podcasters the tools to build easy podcasts out of the box. Spotify tells me that the company will keep Anchor’s branding and products around as consumer-facing offerings to help on-board users (it wouldn’t offer the same promise for Gimlet’s brand). More recently, Anchor has also worked to make ad sales more accessible for budding podcasters).

How all of that trickles down to content creators, however, remains to be seen. Music streaming like Spotify and Apple Music have been notoriously stingy when it comes to actually paying out musicians. And premium content, the kind Spotify was after in its Gimlet purchase, takes time and money, both things that are harder and harder to come by in this digital age.

Hartman disputes the music comparison, noting that podcasting is a nascent field without the same kind of precedent for monetization. “Podcasting wasn’t this massive industry that got disrupted,” he says. “It’s an industry that is figuring out its way and growing. Creators go into podcasting trying to find a new way to connect to audiences.”

06 Feb 2019

Eclipse Ventures in Palo Alto just added two more big wheels as general partners

Mike McNamara retired from the electronics manufacturing giant and services business Flex last December after 12 years as CEO of the company, and another 12 working his way up to the . corner office, but he didn’t say at the time where he was headed.

As it turns out, McNamara had decided to join Eclipse Ventures, a four-year-old, Palo Alto, Ca.-based firm led by Lior Susan, who’d previously founded LabIX, a hardware investment platform backed by Flex, when it was still called Flextronics.

He isn’t the firm’s only new general partner, either. Eclipse is also announcing today that it has brought aboard Sanjay Jha, who was mostly recently the CEO of Global Foundries and and was both CEO and co-CEO of Motorola Mobility before that. (And before Motorola Mobility, Jha spent 14 years as an executive at Qualcomm, including as the COO of one of its divisions.)

The hires are a big deal. They’re also in line with the other big wheels that Susan has drawn into the firm, which funds full-stack companies — meaning companies selling hardware, software, and data — and which notably just officially closed on $500 million in funding, two weeks after an SEC filing appeared that suggested as much.

In 2016, for example, Eclipse hired as a partner Greg Reichow, who was previously Tesla’s executive leader of global manufacturing, factory/automation engineering, supply chain, and “product excellence.”

Eclipse is also run by Pierre Lamond, who made his name over a very long career with Sequoia Capital.

Others of its (male-only) investment team include Adam Bryant, who was formerly a director with Proterra, the electric bus company; Justin Butler, who led commercial operations at Misfit, a digital health company acquired by the Fossil Group for more than $250 million; and Seth Winterroth, who was previously an investor at GE Ventures.

Eclipse is still relatively low-flying as venture firms go, despite the team it has assembled. Very possibly, Susan learned a lesson about being in the headlines, having been a part of Formation 8, a firm that made a splashy debut but later disbanded. Either way, it’s not slow to pull the trigger. According to Crunchbase, Eclipse has invested in roughly 50 companies. Among those startups to receive checks from the firm most recently are Augury, a six-year-old, New York-based machine health startup that connects vibration and ultrasonic sensors to smartphones to detect machine malfunctions before they happen, which just raised $17 million in Series B funding, and Spell, a two-year-old, New York-based deep learning and AI infrastructure platform that last month raised $15 million co-led by Eclipse.

06 Feb 2019

Facebook will reveal who uploaded your contact info for ad targeting

Facebook’s crack down on non-consensual ad targeting last year will finally produce results. In March, TechCrunch discovered Facebook planned to require advertisers pledge that they had permission to upload someone’s phone number or email address for ad targeting. That tool debuted in June, though there was no verification process and Facebook just took businesses at their word despite the financial incentive to lie. In November, Facebook launched a way for ad agencies and marketing tech developers to specify who they were buying promotions ‘on behalf of’. Soon that information will finally be revealed to users.

Facebook’s new Custom Audiences transparency feature shows when your contact info was uploaded by who, and if it was shared between brands and partners

Facebook previously only revealed what brand was using your contact info for targeting, not who uploaded it or when

Starting February 28th, Facebook’s “Why am I seeing this?” button in the drop-down menu of feed posts will reveal more than the brand who paid for the ad, some biographical details they targeted, and if they’d uploaded your contact info. Facebook will start to show when your contact info was uploaded, if it was by the brand or one of their agency/developer partners, and when access was shared between partners.

This new level of transparency could help users pinpoint what caused a brand to get ahold of their contact info. That might help them to change their behavior to stay more private. The system could also help Facebook zero in on agencies or partners who are constantly uploading contact info and might not have attained it legitimately.

The move comes in the wake of Facebook attaching immediately visible “paid for by” labels to more political ads to defend against election interference. With so many users concerned about how Facebook exploits their data, the Custom Audiences transparency feature could provide a small boost of confidence in a time where people have little faith in the social network’s privacy practices.

06 Feb 2019

How students are founding, funding and joining startups

There has never been a better time to start, join, or fund a startup as a student. 

Young founders who want to start companies while still in school have an increasing number of resources to tap into that exist just for them. Students that want to learn how to build companies can apply to an increasing number of fast-track programs that allow them to gain valuable early stage operating experience. The energy around student entrepreneurship today is incredible. I’ve been immersed in this community as an investor and adviser for some time now, and to say the least, I’m continually blown away by what the next generation of innovators are dreaming up (from Analytical Space’s global data relay service for satellites to Brooklinen’s reinvention of the luxury bed).

Bill Gates in 1973

First, let’s look at student founders and why they’re important. Student entrepreneurs have long been an important foundation of the startup ecosystem. Many students wrestle with how best to learn while in school —some students learn best through lectures, while more entrepreneurial students like author Julian Docks find it best to leave the classroom altogether and build a business instead.

Indeed, some of our most iconic founders are Microsoft’s Bill Gates and Facebook’s Mark Zuckerberg, both student entrepreneurs who launched their startups at Harvard and then dropped out to build their companies into major tech giants. A sample of the current generation of marquee companies founded on college campuses include Snap at Stanford ($29B valuation at IPO), Warby Parker at Wharton (~$2B valuation), Rent The Runway at HBS (~$1B valuation), and Brex at Stanford (~$1B valuation).

Some of today’s most celebrated tech leaders built their first ventures while in school — even if some student startups fail, the critical first-time founder experience is an invaluable education in how to build great companies. Perhaps the best example of this that I could find is Drew Houston at Dropbox (~$9B valuation at IPO), who previously founded an edtech startup at MIT that, in his words, provided a: “great introduction to the wild world of starting companies.”

Student founders are everywhere, but the highest concentration of venture-backed student founders can be found at just 5 universities. Based on venture fund portfolio data from the last six years, Harvard, Stanford, MIT, UPenn, and UC Berkeley have produced the highest number of student-founded companies that went on to raise $1 million or more in seed capital. Some prospective students will even enroll in a university specifically for its reputation of churning out great entrepreneurs. This is not to say that great companies are not being built out of other universities, nor does it mean students can’t find resources outside a select number of schools. As you can see later in this essay, there are number of new ways students all around the country can tap into the startup ecosystem. For further reading, Pitchbook produces an excellent report each year that tracks where all entrepreneurs earned their undergraduate degrees.

Student founders have a number of new media resources to turn to. New email newsletters focused on student entrepreneurship like Justine and Olivia Moore’s Accelerated and Kyle Robertson’s StartU offer new channels for young founders to reach large audiences. Justine and Olivia, the minds behind Accelerated, have a lot of street cred— they launched Stanford’s on-campus incubator Cardinal Ventures before landing as investors at CRV.

StartU goes above and beyond to be a resource to founders they profile by helping to connect them with investors (they’re active at 12 universities), and run a podcast hosted by their Editor-in-Chief Johnny Hammond that is top notch. My bet is that traditional media will point a larger spotlight at student entrepreneurship going forward.

New pools of capital are also available that are specifically for student founders. There are four categories that I call special attention to:

  • University-affiliated accelerator programs
  • University-affiliated angel networks
  • Professional venture funds investing at specific universities
  • Professional venture funds investing through student scouts

While it is difficult to estimate exactly how much capital has been deployed by each, there is no denying that there has been an explosion in the number of programs that address the pre-seed phase. A sample of the programs available at the Top 5 universities listed above are in the graphic below — listing every resource at every university would be difficult as there are so many.

One alumni-centric fund to highlight is the Alumni Ventures Group, which pools LP capital from alumni at specific universities, then launches individual venture funds that invest in founders connected to those universities (e.g. students, alumni, professors, etc.). Through this model, they’ve deployed more than $200M per year! Another highlight has been student scout programs — which vary in the degree of autonomy and capital invested — but essentially empower students to identify and fund high-potential student-founded companies for their parent venture funds. On campuses with a large concentration of student founders, it is not uncommon to find student scouts from as many as 12 different venture funds actively sourcing deals (as is made clear from David Tao’s analysis at UC Berkeley).

Investment Team at Rough Draft Ventures

In my opinion, the two institutions that have the most expansive line of sight into the student entrepreneurship landscape are First Round’s Dorm Room Fund and General Catalyst’s Rough Draft VenturesSince 2012, these two funds have operated a nationwide network of student scouts that have invested $20K — $25K checks into companies founded by student entrepreneurs at 40+ universities. “Scout” is a loose term and doesn’t do it justice — the student investors at these two funds are almost entirely autonomous, have built their own platform services to support portfolio companies, and have launched programs to incubate companies built by female founders and founders of color. Another student-run fund worth noting that has reach beyond a single region is Contrary Capital, which raised $2.2M last year. They do a particularly great job of reaching founders at a diverse set of schools — their network of student scouts are active at 45 universities and have spoken with 3,000 founders per year since getting started. Contrary is also testing out what they describe as a “YC for university-based founders”. In their first cohort, 100% of their companies raised a pre-seed round after Contrary’s demo day. Another even more recently launched organization is The MBA Fund, which caters to founders from the business schools at Harvard, Wharton, and Stanford. While super exciting, these two funds only launched very recently and manage portfolios that are not large enough for analysis just yet.

Over the last few months, I’ve collected and cross-referenced publicly available data from both Dorm Room Fund and Rough Draft Ventures to assess the state of student entrepreneurship in the United States. Companies were pulled from each fund’s portfolio page, then checked against Crunchbase for amount raised, accelerator participation, and other metrics. If you’d like to sift through the data yourself, feel free to ping me — my email can be found at the end of this article. To be clear, this does not represent the full scope of investment activity at either fund — many companies in the portfolios of both funds remain confidential and unlisted for good reasons (e.g. startups working in stealth). In fact, the In addition, data for early stage companies is notoriously variable in quality, even with Crunchbase. You should read these insights as directional only, given the debatable confidence interval. Still, the data is still interesting and give good indicators for the health of student entrepreneurship today.

Dorm Room Fund and Rough Draft Ventures have invested in 230+ student-founded companies that have gone on to raise nearly $1 billion in follow on capital. These funds have invested in a diverse range of companies, from govtech (e.g. mark43, raised $77M+ and FiscalNote, raised $50M+) to space tech (e.g. Capella Space, raised ~$34M). Several portfolio companies have had successful exits, such as crypto startup Distributed Systems (acquired by Coinbase) and social networking startup tbh (acquired by Facebook). While it is too early to evaluate the success of these funds on a returns basis (both were launched just 6 years ago), we can get a sense of success by evaluating the rates by which portfolio companies raise additional capital. Taken together, 34% of DRF and RDV companies in our data set have raised $1 million or more in seed capital. For a rough comparison, CB Insights cites that 40% of YC companies and 48% of Techstars companies successfully raise follow on capital (defined as anything above $750K). Certainly within the ballpark!

Source: Crunchbase

Dorm Room Fund and Rough Draft Ventures companies in our data set have an 11–12% rate of survivorship to Series A. As a benchmark, a previous partner at Y Combinator shared that 20% of their accelerator companies raise Series A capital (YC declined to share the official figure, but it’s likely a stat that is increasing given their new Series A support programs. For further reading, check out YC’s reflection on what they’ve learned about helping their companies raise Series A funding). In any case, DRF and RDV’s numbers should be taken with a grain of salt, as the average age of their portfolio companies is very low and raising Series A rounds generally takes time. Ultimately, it is clear that DRF and RDV are active in the earlier (and riskier) phases of the startup journey.

Dorm Room Fund and Rough Draft Ventures send 18–25% of their portfolio companies to YCombinator or Techstars. Given YC’s 1.5% acceptance rate as reported in Fortune, this is quite significant! Internally, these two funds offer founders an opportunity to participate in mock interviews with YC and Techstars alumni, as well as tap into their communities for peer support (e.g. advice on pitch decks and application content). As a result, Dorm Room Fund and Rough Draft Ventures regularly send cohorts of founders to these prestigious accelerator programs. Based on our data set, 17–20% of DRF and RDV companies that attend one of these accelerators end up raising Series A venture financing.

Source: Crunchbase

Dorm Room Fund and Rough Draft Ventures don’t invest in the same companies. When we take a deeper look at one specific ecosystem where these two funds have been equally active over the last several years — Boston — we actually see that the degree of investment overlap for companies that have raised $1M+ seed rounds sits at 26%. This suggests that these funds are either a) seeing different dealflow or b) have widely different investment decision-making.

Source: Crunchbase

Dorm Room Fund and Rough Draft Ventures should not just be measured by a returns-basis today, as it’s too early. I hypothesize that DRF and RDV are actually encouraging more entrepreneurial activity in the ecosystem (more students decide to start companies while in school) as well as improving long-term founder outcomes amongst students they touch (portfolio founders build bigger and more successful companies later in their careers). As more students start companies, there’s likely a positive feedback loop where there’s increasing peer pressure to start a company or lean on friends for founder support (e.g. feedback, advice, etc).Both of these subjects warrant additional study, but it’s likely too early to conduct these analyses today.

Dorm Room Fund and Rough Draft Ventures have impressive alumni that you will want to track. 1 in 4 alumni partners are founders, and 29% of these founder alumni have raised $1M+ seed rounds for their companies. These include Anjney Midha’s augmented reality startup Ubiquity6 (raised $37M+), Shubham Goel’s investor-focused CRM startup Affinity (raised $13M+), Bruno Faviero’s AI security software startup Synapse (raised $6M+), Amanda Bradford’s dating app The League (raised $2M+), and Dillon Chen’s blockchain startup Commonwealth Labs (raised $1.7M). It makes sense to me that alumni from these communities that decide to start companies have an advantage over their peers — they know what good companies look like and they can tap into powerful networks of young talent / experienced investors.

Beyond Dorm Room Fund and Rough Draft Ventures, some venture capital firms focus on incubation for student-founded startups. Credit should first be given to Lightspeed for producing the amazing Summer Fellows bootcamp experience for promising student founders — after all, Pinterest was built there! Jeremy Liew gives a good overview of the program through his sit-down interview with Afterbox’s Zack Banack. Based on a study they conducted last year, 40% of Lightspeed Summer Fellows alumni are currently active founders. Pear Ventures also has an impressive summer incubator program where 85% of its companies successfully complete a fundraise. Index Ventures is the latest to build an incubator program for student founders, and even accepts founders who want to work on an idea part-time while completing a summer internship.

Let’s now look at students who want to join a startup before founding one. Venture funds have historically looked to tap students for talent, and are expanding the engagement lifecycle. The longest running programs include Kleiner Perkins’ class="m_1196721721246259147gmail-markup--strong m_1196721721246259147gmail-markup--p-strong"> KP Fellows and True Ventures’ TEC Fellows, which focus on placing the next generation’s most promising product managers, engineers, and designers into the portfolio companies of their parent venture funds.

There’s also the secretive Greylock X, a referral-based hand-picked group of the best student engineers in Silicon Valley (among their impressive alumni are founders like Yasyf Mohamedali and Joe Kahn, the folks behind First Round-backed Karuna Health). As these programs have matured, these firms have recognized the long-run value of engaging the alumni of their programs.

More and more alumni are “coming back” to the parent funds as entrepreneurs, like KP Fellow Dylan Field of Figma (and is also hosting a KP Fellow, closing a full circle loop!). Based on their latest data, 10% of KP Fellows alumni are founders — that’s a lot given the fact that their community has grown to 500! This helps explain why Kleiner Perkins has created a structured path to receive $100K in seed funding to companies founded by KP Fellow alumni. It looks like venture funds are beginning to invest in student programs as part of their larger platform strategy, which can have a real impact over the long term (for further reading, see this analysis of platform strategy outcomes by USV’s Bethany Crystal).

KP Fellows in San Francisco

Venture funds are doubling down on student talent engagement — in just the last 18 months, 4 funds have launched student programs. It’s encouraging to see new funds follow in the footsteps of First Round, General Catalyst, Kleiner Perkins, Greylock, and Lightspeed. In 2017, Accel launched their Accel Scholars program to engage top talent at UC Berkeley and Stanford. In 2018, we saw 8VC Fellows, NEA Next, and Floodgate Insiders all launch, targeting elite universities outside of Silicon Valley. Y Combinator implemented Early Decision, which allows student founders to apply one batch early to help with academic scheduling. Most recently, at the start of 2019, First Round launched the Graduate Fund (staffed by Dorm Room Fund alumni) to invest in founders who are recent graduates or young alumni.

Given more time, I’d love to study the rates by which student founders start another company following investments from student scout funds, as well as whether or not they’re more successful in those ventures. In any case, this is an escalation in the number of venture funds that have started to get serious about engaging students — both for talent and dealflow.

Student entrepreneurship 2.0 is here. There are more structured paths to success for students interested in starting or joining a startup. Founders have more opportunities to garner press, seek advice, raise capital, and more. Venture funds are increasingly leveraging students to help improve the three F’s — finding, funding, and fixing. In my personal view, I believe it is becoming more and more important for venture funds to gain mindshare amongst the next generation of founders and operators early, while still in school.

I can’t wait to see what’s next for student entrepreneurship in 2019. If you’re interested in digging in deeper (I’m human — I’m sure I haven’t covered everything related to student entrepreneurship here) or learning more about how you can start or join a startup while still in school, shoot me a note at sxu@dormroomfund.comA massive thanks to Phin Barnes, Rei Wang, Chauncey Hamilton, Peter Boyce, Natalie Bartlett, Denali Tietjen, Eric Tarczynski, Will Robbins, Jasmine Kriston, Alicia Lau, Johnny Hammond, Bruno Faviero, Athena Kan, Shohini Gupta, Alex Immerman, Albert Dong, Phillip Hua-Bon-Hoa, and Trevor Sookraj for your incredible encouragement, support, and insight during the writing of this essay.

06 Feb 2019

References to next-gen Oculus ‘Rift S’ headset reportedly found in internal code

After we broke the news in November that Oculus’s former CEO had left the company partially due to disagreements on the company’s PC hardware direction, including the cancellation of a high-end “Rift 2” in favor of a more iterative “Rift S” headset, new details are emerging that confirm Facebook’s directional shift for its flagship headset.

User interface code discovered by UploadVR seems to confirm that Oculus is actively readying their software for the “Rift S” hardware. Details including the “Rift S” name and the fact that the headset will be powered by onboard cameras rather than external sensors were apparent from code that referenced options to change settings on the “Rift S cameras.” The report also details that the displays could function differently and utilize a software-based approach for adjusting for the distance between a user’s eyes.

We’ve reached out to Facebook for comment.

Our initial report detailed that Oculus would be abandoning its external sensor system and relying on the onboard tracking camera setup from the Oculus Quest headset. Additionally we shared details that the device’s display resolution would be getting a small bump.

We’ve been told that the Rift S headset will launch this year. Last year, the Oculus Go headset was revealed at Facebook’s F8 conference, will we see a similar unveil in a few months for both the Rift S and Oculus Quest or will the social networking giant space out its VR hardware launches a bit?