Author: azeeadmin

15 Sep 2018

A new CSS-based web attack will crash and restart your iPhone

A security researcher has found a new way to crash and restart any iPhone — with just a few lines of code.

Sabri Haddouche tweeted a proof-of-concept webpage with just 15 lines of code which, if visited, will crash and restart an iPhone or iPad. Those on macOS may also see Safari freeze when opening the link.

The code exploits a weakness in iOS’ web rendering engine WebKit, which Apple mandates all apps and browsers use, Haddouche told TechCrunch. He explained that nesting a ton of elements — such as <div> tags — inside a backdrop filter property in CSS, you can use up all of the device’s resources and cause a kernel panic, which shuts down and restarts the operating system to prevent damage.

“Anything that renders HTML on iOS is affected,” he said. That means anyone sending you a link on Facebook or Twitter, or if any webpage you visit includes the code, or anyone sending you an email, he warned.

TechCrunch tested the exploit running on the most recent mobile software iOS 11.4.1, and confirm it crashes and restarts the phone. Thomas Reed, director of Mac & Mobile at security firm Malwarebytes confirmed that  the most recent iOS 12 beta also froze when tapping the link.

The lucky whose devices won’t crash may just see their device restart (or “respring”) the user interface instead.

For those curious, you can see how it works without it running the crash-inducing code.

The good news is that as annoying as this attack is, it can’t be used to run malicious code, he said, meaning malware can’t run and data can’t be stolen using this attack. But there’s no easy way to prevent the attack from working. One tap on a booby-trapped link sent in a message or opening an HTML email that renders the code can crash the device instantly.

Haddouche contacted Apple on Friday about the attack, which is said to be investigating. A spokesperson did not immediately respond to a request for comment.

15 Sep 2018

Original Content podcast: Netflix’s ‘Insatiable’ is even worse than you’ve heard

“Insatiable,” the Netflix comedy about an overweight high school girl who suddenly becomes slim and beautiful thanks to having her jaw wired shut for a summer, has been drawing controversy ever since its first trailer went online.

The reviews for the show were almost uniformly negative, yet they didn’t quite prepare me for the terribleness of the initial episodes, which alternate between feeble attempts to mine humor from hot-button issues like sexual assault and suicide, and even feebler attempts to treat those issues seriously.

To help me figure out just what makes this show so bad, I was joined by Original Content‘s original co-host, Darrell Etherington. Our ultimate question: Is this the worst thing we’ve watched for the podcast? (Yes.)

We also discuss the fact that Henry Cavill has been cast as the lead in Netflix’s adaptation of the “Witcher” video game franchise.

This episode was actually recorded more than a week ago, but I didn’t get time to edit it until after Disrupt SF. So much has happened since then — like “The Witcher”‘s showrunner leaving Twitter and Cavill apparently departing the role of Superman. (Plus, somehow, “Insatiable” has been renewed for a second season.) Still, the initial news gave us an opportunity to weigh the relative merits of the “Mission Impossible” movies, and to discuss my favorite subject, Superman’s invisible mustache in “Justice League”.

You can listen in the player below, subscribe using Apple Podcasts or find us in your podcast player of choice. If you like the show, please let us know by leaving a review on Apple. You also can send us feedback directly. (Or suggest shows and movies for us to review!)

15 Sep 2018

Everyday home gear made smart

Editor’s note: This post was done in partnership with Wirecutter. When readers choose to buy Wirecutter’s independently chosen editorial picks, Wirecutter and TechCrunch may earn affiliate commissions.

If you only have one smart home device, it’s likely something simple and fun like a voice-controlled speaker or color-changing LED light bulb. As you expand your smart home setup, you can begin to swap out gear that isn’t as flashy but you still use everyday.

Switching to connected locks, power outlets and smoke alarms are all simple installs that can improve your safety and comfort in your own home. We’ve pulled together some of our favorite essentials made smart for anyone looking to upgrade.

Smart lock: Kwikset Kevo Smart Lock 2nd Gen

The Kwikset Kevo Smart Lock 2nd Gen is the most versatile smart lock that we’ve tested. Whether you prefer to use a wireless fob, smartphone app or key, you’ll be able to control the lock with all of them. When we compared it to similar models, the Kevo’s Bluetooth-activated tap-to-unlock mechanism was the easiest to use.

The second generation of the Kevo improved on security and has all-metal internal components for better protection against forced break-in attempts. With the optional Kevo Plus upgrade, you’ll add the ability to control the lock remotely and receive status-monitoring updates.

Photo: Liam McCabe

Robot Vacuum: iRobot Roomba 960

If cleaning is neither your forte or preferred pastime, a robot vacuum will come in handy. Our upgrade pick, the iRobot Roomba 960, is one of the most powerful models that we tested. It can be controlled through the iRobot Home app and uses a bump-and-track navigation system that helps vacuum an entire floor without missing spots.

If its battery is running low during a session, it’ll return to its dock to power up before finishing the job. It’s easy to disassemble for maintenance and is equipped with repairable parts that make it worth its price over some of our less serviceable picks.

Photo: Rachel Cericola

Plug-in Smart Outlet: Belkin Wemo Mini

We tested 26 smart outlet models over more than 45 hours and chose the Belkin Wemo Mini Wi-Fi plug as our top pick. If you’ve ever thought it’d be nice to remotely turn on or off home essentials such as lamps, air conditioners and fans from your smartphone, plugging them into a smart outlet makes it possible.

The Wemo Mini has proven to be reliable throughout long-term testing, it doesn’t block other outlets on the same wall plate and it’s compatible with iOS and Android devices and assistants, including HomeKit/Siri, Alexa and Google Assistant. The interface of the Wemo app is intuitive and easy to use. You can view all of your connected devices on one screen, set powering timers and from anywhere power on or off a device plugged into the Wemo outlet.

Photo: Jennifer Pattison Tuohy

Smart Thermostat: Nest Thermostat E

For a smart thermostat that’s affordable and doesn’t require extensive programming, we recommend the Nest Thermostat E. After about a week, it creates a schedule after learning cooling and heating preferences that you’ve set. It isn’t compatible with as many HVAC systems as similar Nest models, but it’s easy to install and doesn’t lack any features we expect.

It does come with Eco Mode — an energy-saving geofencing feature that detects when your home is empty (or when your smartphone is nowhere near your house). The Nest app uses the same technology to set the thermostat to a preferred temperature when it senses you’re on your way home. If you don’t have your smartphone on hand, you can still operate the Thermostat E by turning its outer ring and pressing selections on its touchscreen.

Photo: Michael Hession

Smart Smoke Alarm: Nest Protect

A smoke alarm is one of the most relied-upon safety devices in every home. Nonetheless, it’s easy to forget to do routine checks to ensure it’s in tip-top shape and functioning properly. With a smart smoke alarm like the Nest Protect, we found that its simple app, self-tests, monthly sound checks and consistent alerts are enough to keep fire safety worries at bay.

It isn’t difficult to install, has a sleek design and integrates with other smart home devices like the Nest Cam (which can record video of a fire) and the Nest Learning Thermostat (which shuts down HVAC systems that may be the cause of a fire). It’s sensitive to fast- and slow-burning fires, plus it monitors homes for both smoke and carbon monoxide.

These picks may have been updated by Wirecutter. When readers choose to buy Wirecutter’s independently chosen editorial picks, Wirecutter and TechCrunch may earn affiliate commissions.

15 Sep 2018

In VC fund creation, have we passed the peak?

In venture capital, a variant on the Glengarry Glen Ross mandate is most fund managers’ modus operandi: Always. Be. Raising.

And it seems like VCs have picked up on that. In the last few months, even casual readers of the tech press would notice many, many stories about VCs raising big new funds. So are venture investors spinning up new funds as often as they did in the past?

VCs are certainly raising tons of money, and Crunchbase News reported earlier this week that these huge funds are bending the shape of the VC fundraising curve upward. But is that the full story? Even though 2018 has been a banner year so far for venture fund origination on the highest end of the assets-under-management spectrum, what about the market as a whole?

Aggregated venture capital and micro VC fundraising data from Crunchbase suggests that U.S.-based firms are spinning up fewer new funds than they did just a couple of years ago. In other words, the peak might be in.

Let’s take a look at the numbers, which we’ve segmented by U.S. Census region.

There are a few trends to glean from the chart above, and it comes down to pace and scale.

We’re able to see how the pace of venture fund creation varies by region. In the highly unlikely event you didn’t already know that the East and West coasts are responsible for the bulk of venture fund creation, the above chart makes that fact plainly obvious.

And at least when it comes to investors from Western and Eastern states, the difference is one of scale rather than direction. As the count of funds raised rises in the East, so it goes in the West.

Our data suggest that, in aggregate, new fund creation hit a local maximum in 2016. With more than 260 new funds announced that year, it’s a record that stretches back at least to the time of the first dot-com collapse — if it’s not an all-time record on its own.

Not all bad news

Even given historic patterns of when new funds are announced — which suggest fewer funds are announced in Q4 — matching 2017 levels of new fund creation is likely. Although nobody should hold their breath, it’s possible that 2018 will also break records for new fund creation and total capital raised.

To break the dollar volume record, VCs need to raise another $4.6 billion in new funds by the end of the year. Considering that approximately $40 billion has already been raised, this seems possible. But it’s important to remember that eighty percent of new funds are smaller than $250 million.

One of the things some might ignore about all the money currently going into venture capital funds (and, by proxy, into privately held tech startups) is that it is going to have to come back to limited partners with a hefty return.

The $45 billion U.S. VCs are on pace to raise in 2018 would have to net more than $135 billion in returns by 2028, presuming a 10-year term for the fund and a 3x realized multiple (the minimum threshold for venture scale returns).

That sounds unlikely, given that we are in the senescence of a bull cycle. But so long as public tech companies soar, SaaS booms and investors are so hungry for tech shares that middling Chinese firms can go public domestically twice in a week, there’s little reason to expect too much of a pullback in the short term.

Until the real correction comes, at which point we’ll see some far shorter bars added to our graph.

15 Sep 2018

FEMA to send its first ‘Presidential Alert’ in emergency messaging system test

The Federal Emergency Management Agency will this week test a new “presidential alert” system that will allow the president to send a message to every phone in the US.

The alert is the first nationwide test of the presidential alert test, FEMA said in an advisory, which allows the president to address the nation in the event of a national emergency.

Using the Wireless Emergency Alert (WEA) system, anyone with cell service should receive the message to their phone.

The presidential alert to be sent Tuesday will look like this. (Image: FEMA)

“THIS IS A TEST of the National Wireless Emergency Alert System. No action is needed,” the message will read, due to be sent out on Thursday at 2:18pm ET.

Minutes later, the Emergency Alert System (EAS) will broadcast a similar test message over television, radio, and wireline video services.

Emergency alerts aren’t new and warning systems have long been used — and tested — in the US to alert citizens of local and state incidents, like AMBER alerts for missing children and severe weather events that may result in danger to or loss of life.

But presidential alerts have yet to be tested. Unlike other alerts, citizens will not be allowed to opt out of presidential alerts.

Allowing the president to send nationwide alerts was included in the passing of the WARN Act in 2006 under the Bush administration, creating a state-of-the-art emergency alert system that would replace an aging infrastructure. As alarming as these alerts can (and are designed to) be, the system aims to modernize the alerts system for a population increasingly moving away from televisions and towards mobile technology.

These presidential alerts are solely at the discretion of the president and can be sent for any reason, but experts have shown little concern that the system may be abused.

But the system isn’t perfect. Earlier this year, panic spread on Hawaii after an erroneous alert went out to residents warning of a “ballistic missile thread inbound.” The message said, “this is not a drill.” The false warning was amid the height of tensions between the US and North Korea, which at the time was regularly testing its ballistic missiles as part of its nuclear weapons program.

More than 100 carriers will participate in the test, FEMA said.

15 Sep 2018

Why the Pentagon’s $10 billion JEDI deal has cloud companies going nuts

By now you’ve probably heard of the Defense Department’s massive winner-take-all $10 billion cloud contract dubbed the Joint Enterprise Defense Infrastructure (or JEDI for short).
Star Wars references aside, this contract is huge, even by government standards.The Pentagon would like a single cloud vendor to build out its enterprise cloud, believing rightly or wrongly that this is the best approach to maintain focus and control of their cloud strategy.

Department of Defense (DOD) spokesperson Heather Babb tells TechCrunch the department sees a lot of upside by going this route. “Single award is advantageous because, among other things, it improves security, improves data accessibility and simplifies the Department’s ability to adopt and use cloud services,” she said.

Whatever company they choose to fill this contract, this is about modernizing their computing infrastructure and their combat forces for a world of IoT, artificial intelligence and big data analysis, while consolidating some of their older infrastructure. “The DOD Cloud Initiative is part of a much larger effort to modernize the Department’s information technology enterprise. The foundation of this effort is rationalizing the number of networks, data centers and clouds that currently exist in the Department,” Babb said.

Setting the stage

It’s possible that whoever wins this DOD contract could have a leg up on other similar projects in the government. After all it’s not easy to pass muster around security and reliability with the military and if one company can prove that they are capable in this regard, they could be set up well beyond this one deal.

As Babb explains it though, it’s really about figuring out the cloud long-term. “JEDI Cloud is a pathfinder effort to help DOD learn how to put in place an enterprise cloud solution and a critical first step that enables data-driven decision making and allows DOD to take full advantage of applications and data resources,” she said.

Photo: Mischa Keijser for Getty Images

The single vendor component, however, could explain why the various cloud vendors who are bidding, have lost their minds a bit over it — everyone except Amazon, that is, which has been mostly silent, happy apparently to let the process play out.

The belief amongst the various other players, is that Amazon is in the driver’s seat for this bid, possibly because they delivered a $600 million cloud contract for the government in 2013, standing up a private cloud for the CIA. It was a big deal back in the day on a couple of levels. First of all, it was the first large-scale example of an intelligence agency using a public cloud provider. And of course the amount of money was pretty impressive for the time, not $10 billion impressive, but a nice contract.

For what it’s worth, Babb dismisses such talk, saying that the process is open and no vendor has an advantage. “The JEDI Cloud final RFP reflects the unique and critical needs of DOD, employing the best practices of competitive pricing and security. No vendors have been pre-selected,” she said.

Complaining loudly

As the Pentagon moves toward selecting its primary cloud vendor for the next decade, Oracle in particular has been complaining to anyone who will listen that Amazon has an unfair advantage in the deal, going so far as to file a formal complaint last month, even before bids were in and long before the Pentagon made its choice.

Photo: mrdoomits for Getty Images (cropped)

Somewhat ironically, given their own past business model, Oracle complained among other things that the deal would lock the department into a single platform over the long term. They also questioned whether the bidding process adhered to procurement regulations for this kind of deal, according to a report in the Washington Post. In April, Bloomberg reported that co-CEO Safra Catz complained directly to the president that the deal was tailor made for Amazon.

Microsoft hasn’t been happy about the one-vendor idea either, pointing out that by limiting itself to a single vendor, the Pentagon could be missing out on innovation from the other companies in the back and forth world of the cloud market, especially when we’re talking about a contract that stretches out for so long.

As Microsoft’s Leigh Madden told TechCrunch in April, the company is prepared to compete, but doesn’t necessarily see a single vendor approach as the best way to go. “If the DOD goes with a single award path, we are in it to win, but having said that, it’s counter to what we are seeing across the globe where 80 percent of customers are adopting a multi-cloud solution,” he said at the time.

He has a valid point, but the Pentagon seems hell bent on going forward with the single vendor idea, even though the cloud offers much greater interoperability than proprietary stacks of the 1990s (for which Oracle and Microsoft were prime examples at the time).

Microsoft has its own large DOD contract in place for almost a billion dollars, although this deal from 2016 was for Windows 10 and related hardware for DOD employees, rather than a pure cloud contract like Amazon has with the CIA.

It also recently released Azure Stack for government, a product that lets government customers install a private version of Azure with all the same tools and technologies you find in the public version, and could prove attractive as part of its JEDI bid.

Cloud market dynamics

It’s also possible that the fact that Amazon controls the largest chunk of the cloud infrastructure market, might play here at some level. While Microsoft has been coming fast, it’s still about a third of Amazon in terms of market size, as Synergy Research’s Q42017 data clearly shows.

The market hasn’t shifted dramatically since this data came out. While market share alone wouldn’t be a deciding factor, Amazon came to market first and it is much bigger in terms of market than the next four combined, according to Synergy. That could explain why the other players are lobbying so hard and seeing Amazon as the biggest threat here, because it’s probably the biggest threat in almost every deal where they come up against each other, due to its sheer size.

Consider also that Oracle, which seems to be complaining the loudest, was rather late to the cloud after years of dismissing it. They could see JEDI as a chance to establish a foothold in government that they could use to build out their cloud business in the private sector too.

10 years might not be 10 years

It’s worth pointing out that the actual deal has the complexity and opt-out clauses of a sports contract with just an initial two-year deal guaranteed. A couple of three-year options follow, with a final two-year option closing things out. The idea being, that if this turns out to be a bad idea, the Pentagon has various points where they can back out.

Photo: Henrik Sorensen for Getty Images (cropped)

In spite of the winner-take-all approach of JEDI, Babb indicated that the agency will continue to work with multiple cloud vendors no matter what happens. “DOD has and will continue to operate multiple clouds and the JEDI Cloud will be a key component of the department’s overall cloud strategy. The scale of our missions will require DOD to have multiple clouds from multiple vendors,” she said.

The DOD accepted final bids in August, then extended the deadline for Requests for Proposal to October 9th. Unless the deadline gets extended again, we’re probably going to finally hear who the lucky company is sometime in the coming weeks, and chances are there is going to be lot of whining and continued maneuvering from the losers when that happens.

15 Sep 2018

Why the Pentagon’s $10 billion JEDI deal has cloud companies going nuts

By now you’ve probably heard of the Defense Department’s massive winner-take-all $10 billion cloud contract dubbed the Joint Enterprise Defense Infrastructure (or JEDI for short).
Star Wars references aside, this contract is huge, even by government standards.The Pentagon would like a single cloud vendor to build out its enterprise cloud, believing rightly or wrongly that this is the best approach to maintain focus and control of their cloud strategy.

Department of Defense (DOD) spokesperson Heather Babb tells TechCrunch the department sees a lot of upside by going this route. “Single award is advantageous because, among other things, it improves security, improves data accessibility and simplifies the Department’s ability to adopt and use cloud services,” she said.

Whatever company they choose to fill this contract, this is about modernizing their computing infrastructure and their combat forces for a world of IoT, artificial intelligence and big data analysis, while consolidating some of their older infrastructure. “The DOD Cloud Initiative is part of a much larger effort to modernize the Department’s information technology enterprise. The foundation of this effort is rationalizing the number of networks, data centers and clouds that currently exist in the Department,” Babb said.

Setting the stage

It’s possible that whoever wins this DOD contract could have a leg up on other similar projects in the government. After all it’s not easy to pass muster around security and reliability with the military and if one company can prove that they are capable in this regard, they could be set up well beyond this one deal.

As Babb explains it though, it’s really about figuring out the cloud long-term. “JEDI Cloud is a pathfinder effort to help DOD learn how to put in place an enterprise cloud solution and a critical first step that enables data-driven decision making and allows DOD to take full advantage of applications and data resources,” she said.

Photo: Mischa Keijser for Getty Images

The single vendor component, however, could explain why the various cloud vendors who are bidding, have lost their minds a bit over it — everyone except Amazon, that is, which has been mostly silent, happy apparently to let the process play out.

The belief amongst the various other players, is that Amazon is in the driver’s seat for this bid, possibly because they delivered a $600 million cloud contract for the government in 2013, standing up a private cloud for the CIA. It was a big deal back in the day on a couple of levels. First of all, it was the first large-scale example of an intelligence agency using a public cloud provider. And of course the amount of money was pretty impressive for the time, not $10 billion impressive, but a nice contract.

For what it’s worth, Babb dismisses such talk, saying that the process is open and no vendor has an advantage. “The JEDI Cloud final RFP reflects the unique and critical needs of DOD, employing the best practices of competitive pricing and security. No vendors have been pre-selected,” she said.

Complaining loudly

As the Pentagon moves toward selecting its primary cloud vendor for the next decade, Oracle in particular has been complaining to anyone who will listen that Amazon has an unfair advantage in the deal, going so far as to file a formal complaint last month, even before bids were in and long before the Pentagon made its choice.

Photo: mrdoomits for Getty Images (cropped)

Somewhat ironically, given their own past business model, Oracle complained among other things that the deal would lock the department into a single platform over the long term. They also questioned whether the bidding process adhered to procurement regulations for this kind of deal, according to a report in the Washington Post. In April, Bloomberg reported that co-CEO Safra Catz complained directly to the president that the deal was tailor made for Amazon.

Microsoft hasn’t been happy about the one-vendor idea either, pointing out that by limiting itself to a single vendor, the Pentagon could be missing out on innovation from the other companies in the back and forth world of the cloud market, especially when we’re talking about a contract that stretches out for so long.

As Microsoft’s Leigh Madden told TechCrunch in April, the company is prepared to compete, but doesn’t necessarily see a single vendor approach as the best way to go. “If the DOD goes with a single award path, we are in it to win, but having said that, it’s counter to what we are seeing across the globe where 80 percent of customers are adopting a multi-cloud solution,” he said at the time.

He has a valid point, but the Pentagon seems hell bent on going forward with the single vendor idea, even though the cloud offers much greater interoperability than proprietary stacks of the 1990s (for which Oracle and Microsoft were prime examples at the time).

Microsoft has its own large DOD contract in place for almost a billion dollars, although this deal from 2016 was for Windows 10 and related hardware for DOD employees, rather than a pure cloud contract like Amazon has with the CIA.

It also recently released Azure Stack for government, a product that lets government customers install a private version of Azure with all the same tools and technologies you find in the public version, and could prove attractive as part of its JEDI bid.

Cloud market dynamics

It’s also possible that the fact that Amazon controls the largest chunk of the cloud infrastructure market, might play here at some level. While Microsoft has been coming fast, it’s still about a third of Amazon in terms of market size, as Synergy Research’s Q42017 data clearly shows.

The market hasn’t shifted dramatically since this data came out. While market share alone wouldn’t be a deciding factor, Amazon came to market first and it is much bigger in terms of market than the next four combined, according to Synergy. That could explain why the other players are lobbying so hard and seeing Amazon as the biggest threat here, because it’s probably the biggest threat in almost every deal where they come up against each other, due to its sheer size.

Consider also that Oracle, which seems to be complaining the loudest, was rather late to the cloud after years of dismissing it. They could see JEDI as a chance to establish a foothold in government that they could use to build out their cloud business in the private sector too.

10 years might not be 10 years

It’s worth pointing out that the actual deal has the complexity and opt-out clauses of a sports contract with just an initial two-year deal guaranteed. A couple of three-year options follow, with a final two-year option closing things out. The idea being, that if this turns out to be a bad idea, the Pentagon has various points where they can back out.

Photo: Henrik Sorensen for Getty Images (cropped)

In spite of the winner-take-all approach of JEDI, Babb indicated that the agency will continue to work with multiple cloud vendors no matter what happens. “DOD has and will continue to operate multiple clouds and the JEDI Cloud will be a key component of the department’s overall cloud strategy. The scale of our missions will require DOD to have multiple clouds from multiple vendors,” she said.

The DOD accepted final bids in August, then extended the deadline for Requests for Proposal to October 9th. Unless the deadline gets extended again, we’re probably going to finally hear who the lucky company is sometime in the coming weeks, and chances are there is going to be lot of whining and continued maneuvering from the losers when that happens.

15 Sep 2018

North Korea skirts US sanctions by secretly selling software around the globe

Fake social media profiles are useful for more than just sowing political discord among foreign adversaries, as it turns out. A group linked to the North Korean government has been able to duck existing sanctions on the country by concealing its true identity and developing software for clients abroad.

This week, the US Treasury issued sanctions against two tech companies accused of running cash-generating front operations for North Korea: Yanbian Silverstar Network Technology or “China Silver Star,” based near Shenyang, China, and a Russian sister company called Volasys Silver Star. The Treasury also sanctioned China Silver Star’s North Korean CEO Jong Song Hwa.

“These actions are intended to stop the flow of illicit revenue to North Korea from overseas information technology workers disguising their true identities and hiding behind front companies, aliases, and third-party nationals,” Treasury Secretary Steven Mnuchin said of the sanctions.

As the Wall Street Journal reported in a follow-up story, North Korean operatives advertised with Facebook and LinkedIn profiles, solicited business with Freelance.com and Upwork, crafted software using Github, communicated over Slack and accepted compensation with Paypal. The country appears to be encountering little resistance putting tech platforms built by US companies to work building software including “mobile games, apps, [and] bots” for unwitting clients abroad.

The US Treasury issued its first warnings of secret North Korean software development scheme in July, though did not provide many details at the time. The Wall Street Journal was able to identify “tens of thousands” of dollars stemming from the Chinese front company, though that’s only a representative sample. The company worked as a middleman, contracting its work out to software developers around the globe and then denying payment for their services.

Facebook suspended many suspicious accounts linked to the scheme after they were identified by the Wall Street Journal, including one for “Everyday-Dude.com”:

“A Facebook page for Everyday-Dude.com, showing packages with hundreds of programs, was taken down minutes later as a reporter was viewing it. Pages of some of the account’s more than 1,000 Facebook friends also subsequently disappeared…

“[Facebook] suspended numerous North Korea-linked accounts identified by the Journal, including one that Facebook said appeared not to belong to a real person. After it closed that account, another profile, with identical friends and photos, soon popped up.”

Linkedin and Upwork similarly removed accounts linked to the North Korean operations.

Beyond the consequences for international relations, software surreptitiously sold by the North Korean government poses considerable security risks. According to the Treasury, the North Korean government makes money off of a “range of IT services and products abroad” including “website and app development, security software, and biometric identification software that have military and law enforcement applications.” For companies unwittingly buying North Korea-made software, the potential for malware that could give the isolated nation eyes and ears beyond its borders is high, particularly given that the country has already demonstrated its offensive cyber capabilities.

Between that and sanctions against doing business with the country, Mnuchin urges the information technology industry and other businesses to exercise awareness of the ongoing scheme to avoid accidentally contracting with North Korea on tech-related projects.

15 Sep 2018

This is how much VCs are paid

Venture capital is known for being an opaque industry, so it’s no surprise most of us have no idea what the average VC earns in a year.

I got a closer look at the survey results of J. Thelander Consulting‘s annual venture firm compensation survey and, unsurprisingly, VCs make a lot of money.

Just how much? Well, of the 204 VCs surveyed (172 male and 32 female), the average general partner expects to make roughly $634,000 this year, including a bonus for 2017 performance.

The averages varied a bit depending on the size of the firm. VCs at firms with less than $250 million assets under management (AUM), for example, earn less than their counterparts at larger firms.

[gallery ids="1712989,1712990,1712991"]

 

GPs, who sit at the top of the ranks at VC firms, have the largest compensation packages. Their yearly bonuses are, on average, larger than an associate’s, or entry-level investor’s, average base pay.

The survey didn’t parse out data from firms with billions AUM, aka the Sequoias, NEAs or Kleiner Perkins of the world. Those folks, if the above is any indicator, earn more.

Take note: This is all in addition to a VC’s carried interest, or percentage of a fund’s profits paid to firms’ partners.

14 Sep 2018

NASA’s climate-monitoring space laser is the last to ride to space on a Delta II rocket

This weekend, NASA is launching a new high-tech satellite to monitor the planet’s glacier and sea ice levels — with space lasers, naturally. ICESat-2 will be a huge boon for climatologists, and it’s also a bittersweet occasion: it will be the final launch aboard the trusty Delta II rocket, which has been putting birds in the air for nearly 30 years.

Takeoff is set for 5:46 AM Pacific Time Saturday morning, so you’ll have to get up early if you want to catch it. You can watch the launch live here, with NASA coverage starting about half an hour before.

Keeping track of the Earth’s ice levels is more important than ever; with climate change causing widespread havoc, precise monitoring of major features like the Antarctic ice sheet could help climatologists predict and understand global weather patterns.

Like Aeolus, which launched in July, ICESat-2 is a spacecraft with a single major instrument, not a “Christmas tree” of sensors and antennas. And like Aeolus, ICESat-2 carries a giant laser. But while the first was launched to watch the movement of the air in-between it and the ground, the second must monitor the ground through that moving air.

It does so by using an industrial-size, hyper-precise altimeter: a single, powerful green laser split into six beams — three pairs of two, really, arranged to pass over the landscape in a predictable way.

But the real magic is how those lasers are detected. Next to the laser is a special telescope that watches for the beams’ reflections. Incredibly, it only collects “about a dozen” photons from each laser pulse, and times their arrival down to a billionth of a second. And it does this 10,000 times per second, which at its speed means a pulse is bouncing off the Earth every 2.3 feet or so.

As if that wasn’t impressive enough, its altitude readings are accurate down to the inch. And with multiple readings over time, it should be able to tell whether an ice sheet has risen or fallen on the order of millimeters.

So if you’re traveling in the Antarctic and you drop a pencil, be sure to pick it up or it might throw things off.

Of course, it’s not just for ice; the same space laser will also return the exact heights of buildings, tree canopies and other features. It’s a pity there aren’t more of these satellites — they sound rather useful.

Although ICESat-2 itself is notable and interesting, this launch is significant for a second reason: this will be the final launch atop a Delta II rocket. Rocketry standby United Launch Alliance is in charge of this one, as it has been for so many others.

Introduced in 1989, the Delta II has launched everything from communication satellites to Mars orbiters and landers; Spirit and Opportunity both left the Earth on Delta IIs. All told, more than 150 launches have been made on these rockets, and if Saturday’s launch goes as planned, it will be the 100th successful Delta II launch in a row. That’s a hell of a record. (To be clear, that doesn’t mean 50 failed; but a handful of failures over the decades have marred the launch vehicle’s streak.)

A Delta II launching for the Aquarius mission in 2011

One charming yet perhaps daunting idiosyncrasy of the system is that someone somewhere has to literally click a button to initiate takeoff — no automation for this thing; it’s someone’s job to hit the gas, so they better look sharp.

The ULA’s Bill Cullen told Jason Davis of the Planetary Society, for his epitaph on the rocket:

Yes, the Delta II engine start command is initiated by a console operator. The launch control system is 25 years old, and at the time this used a ‘person in the loop’ control which was preferred compared to the complexities of a fault-tolerant computer system.

So why are we leaving this tried and true rocket behind? It’s expensive and not particularly big. With a payload capacity of 4 tons and a cost (for this mission anyway) approaching a hundred million dollars, it’s just not a good value any more. Not only that, but Launch Complex 2 at Vandenberg Air Base is the only place left on Earth with the infrastructure to launch it, which significantly limits the orbits and opportunities for prospective missions. After ICESat-2’s launch, even that will be torn down — though hopefully they’ll keep the pieces somewhere, for posterity.

Although this is the last Delta II to launch, there is one more rocket left without a mission, the last, as it were, on the lot. Plans are not solid yet, but it’s a good bet this classic rocket will end up in a museum somewhere — perhaps standing upright with others at Kennedy Space Center.