Author: azeeadmin

25 Aug 2018

For IGTV, Instagram needs slow to mean steady

Instagram has never truly failed at anything, but judging by modest initial view counts, IGTV could get stuck with a reputation as an abandoned theater if the company isn’t careful. It’s no flop, but the long-form video hub certainly isn’t an instant hit like Instagram Stories. Two months after that launched in 2016, Instagram was happy to trumpet how its Snapchat clone had hit 100 million users. Yet two months after IGTV’s launch, the Facebook subsidiary has been silent on its traction.

“It’s a new format. It’s different. We have to wait for people to adopt it and that takes time,” Instagram CEO Kevin Systrom told me. “Think of it this way: we just invested in a startup called IGTV, but it’s small, and it’s like Instagram was ‘early days.'”

It’s indeed too early for a scientific analysis, and Instagram’s feed has been around since 2010, so it’s obviously not a fair comparison, but we took a look at the IGTV view counts of some of the feature’s launch partner creators. Across six of those creators, their recent feed videos are getting roughly 6.8X as many views as their IGTV posts. If IGTV’s launch partners that benefited from early access and guidance aren’t doing so hot, it means there’s likely no free view count bonanza in store from other creators or regular users.

They, and IGTV, will have to work for their audience. That’s already proving difficult for the standalone IGTV app. Though it peaked at the #25 overall US iPhone app and has seen 2.5 million downloads across iOS and Android according to Sensor Tower, it’s since dropped to #1497 and seen a 94 percent decrease in weekly installs to just 70,000 last week.

Instagram will have to be in it for the long haul if it wants to win at long-form video. Entering the market 13 years after YouTube with a vertical format no one’s quite sure what to do with, IGTV must play the tortoise. If it can avoid getting scrapped or buried, and offer the right incentives and flexibility to creators, IGTV could deliver the spontaneous video viewing experience Instagram lacks. Otherwise, IGTV risks becoming the next Google Plus — a ghost town inside an otherwise thriving product ecosystem.

A glitzy, glitchy start

Instagram gave IGTV a red carpet premiere June 20th in hopes of making it look like the new digital hotspot. The San Francisco launch event offered attendees several types of avocado toast, spa water and ‘Gram-worthy portrait backdrops reminiscent of the Color Factory or Museum of Ice Cream. Instagram hadn’t held a flashy press event since the 2013 launch of video sharing, so it pulled out all the stops. Balloon sculptures lined the entrance to a massive warehouse packed with social media stars and ad execs shouting to each other over the din of the DJ.

But things were rocky from the start. Leaks led TechCrunch to report on the IGTV name and details in the preceding weeks. Technical difficulties with Systrom’s presentation pushed back the start, but not the rollout of IGTV’s code. Tipster Jane Manchun Wong sent TechCrunch screenshots of the new app and features a half hour before it was announced, and Instagram’s own Business Blog jumped the gun by posting details of the launch. The web already knew how IGTV would let people upload vertical videos up to an hour long and browse them through categories like “Popular” and “For You” by the time Systrom took the stage.

IGTV’s launch event featured Instagram-themed donuts and elaborate portrait backdrops. Images via Vicki’s Donuts and Mai Lanpham

“What I’m most proud of is that Instagram took a stand and tried a brand new thing that is frankly hard to pull off. Full-screen vertical video that’s mobile only. That doesn’t exist anywhere else,” Systrom tells me. It was indeed ambitious. Creators were already comfortable making short-form vertical Snapchat Stories by the time Instagram launched its own version. IGTV would have to start from scratch.

Systrom sees the steep learning curve as a differentiator, though. “One of the things I like most about the new format is that it’s actually fairly difficult to just take videos that exist online and simply repost them. That’s not true in feed. That basically forces everyone to create new stuff,” Systrom tells me. “It’s not to say that there isn’t other stuff on there but in general it incentivizes people to produce new things from scratch. And that’s really what we’re looking for. Even if the volume of that stuff at the beginning is smaller than what you might see on the popular page [of Instagram Explore].”

Instagram CEO Kevin Systrom unveils IGTV at the glitzy June 20th launch event

Instagram forced creators to adopt this proprietary format. But it forget to train Stories stars how to entertain us for five or 15 minutes, not 15 seconds, or convince landscape YouTube moguls to purposefully shoot or crop their clips for the way we normally hold our phones.

IGTV’s Popular page features plenty of random viral pap, foreign language content, and poor cropping

That should have been the real purpose of the launch party — demonstrating a variety of ways to turn these format constraints or lack thereof into unique content. Vertical video frames people better than places, and the length allows sustained eye-to-lens contacts that can engender an emotional connection. But a shallow array of initial content and too much confidence that creators would figure it out on their own deprived IGTV of emergent norms that other videographers could emulate to wet their feet.

Now IGTV feels haphazard, with trashy viral videos and miscropped ports amongst its Popular section alongside a few creators trying to produce made-for-IGTV talk shows and cooking tutorials. It’s yet to have its breakout “Chewbacca Mom” or “Rubberbanded Watermelon” blockbuster like Facebook Live. Even an interview with mega celeb Kylie Jenner only had 11,000 views.

Instagram wants to put the focus on the author, not the individual works of art. “Because we don’t have full text search and you can’t just search any random thing, it’s about the creators” Systrom explains. “I think that at its base level that it’s personality driven and creator driven means that you’re going to get really unique content that you won’t find anywhere else and that’s the goal.”

Yet being unique requires extra effort that creators might not invest if they’re unsure of the payoff in either reach or revenue. Michael Sayman, formerly Facebook’s youngest employee who was hired at age 17 to build apps for teens and who now works for Google, summed it up saying: “Many times in my own career, I’ve tried to make something with a unique spin or a special twist because I felt that’s the only way I could make my product stand out from the crowd, only to realize that it was those very twists and spins that made my products feel out of place and confusing to users. Sometimes, the best product is one that doesn’t create any new twists, but rather perfects and builds on top of what has been proven to already be extremely successful.”

A fraction of feed views

The one big surprise of the launch event was where IGTV would exist. Instagram announced it’d live in a standalone IGTV app, but also as a feature in the main app accessible from an orange button atop the home screen that would occasionally call out that new content was inside. But in essence, it was ignorable. IGTV didn’t get the benefit of being splayed out atop Instagram like Stories did. Blow past that one button and avoid downloading the separate app, and users could go right on tapping and scrolling through Instagram without coming across IGTV’s longer videos.

View counts of the launch partners reflect that. We looked at six launch partner creators, comparing their last six feed and IGTV videos older than a week and less than six months old, or fewer videos if that’s all they’d posted.

Only one of the six, BabyAriel, saw an obvious growth trend in her IGTV videos. Her candid IGTV monologues are performing the best of the six compared to feed. She’s earning an average of 243,000 views per IGTV video, about a third as many as she gets on her feed videos. “I’m really happy with my view counts because IGTV is just starting” BabyAriel tells me. She thinks the format will be good for behind-the-scenes clips that complement her longer YouTube videos and shorter Stories. “When I record anything, It’s vertical. When I turn my phone horizontal I think of an hour-long movie.”

Lele Pons, a Latin American comedy and music star who’s one of the most popular Instagram celebrities, gets about 5.7X more feed views than on her IGTV cooking show that averages 1.9 million hits. Instagram posted some IGTV highlights from the first month, but the most popular of now has 4.3 million views — less than half of what Pons gets on her average feed video.

Fitness guides from Katie Austin averaged just 3,600 views on IGTV while she gets 7.5X more in the feed. Lauren Godwin’s colorful comedy fared 5.2X better in the feed. Bryce Xavier saw the biggest differential, earning 15.9X more views for his dance and culture videos. And in the most direct comparison, K-Pop dancer Susie Shu sometimes posts cuts from the same performance to the two destinations, like one that got 273,000 views in feed but just 27,000 on IGTV, with similar clips fairing an average of 7.8X better.

Again, this isn’t to say IGTV is a lame horse. It just isn’t roaring out of the gates. Systrom remains optimistic about inventing a new format. “The question is can we pull that off and the early signs are really good,” he tells me. “We’ve been pretty blown away by the reception and the usage upfront,” though he declined to share any specific statistics. Instagram promised to provide more insight into traction in the future.

YouTube star Casey Neistat is less bullish. He doesn’t think IGTV is working and that engagement has been weak. If IGTV views were surpassing those of YouTube, creators would flock to it, but so far view counts are uninspiring and not worth diverting creative attention, Neistat says. “YouTube offers the best sit-back consumption, and Stories offers active consumption. Where does IGTV fit in? I’m not sure” he tells me. “Why create all of this unique content if it gets lower views, it’s not monetizable, and the viewers aren’t there?”

Susie Shu averages 7.8X more video views in the Instagram feed than on IGTV

For now, the combination of an unfamiliar format, the absence of direction for how to use it and the relatively buried placement has likely tempered IGTV’s traction. Two months in, Instagram Stories was proving itself an existential threat to Snapchat — which it’s in fact become. IGTV doesn’t pose the same danger to YouTube yet, and it will need a strategy to support a more slow-burn trajectory.

The chicken and the IG problem

The first step to becoming a real YouTube challenger is to build up some tent-pole content that gives people a reason to open IGTV. Until there’s something that captures attention, any cross-promotion traffic Instagram sends it will be like pouring water into a bucket with a giant hole in the bottom. Yet until there’s enough viewers, it’s tough to persuade creators to shoot for IGTV since it won’t do a ton to boost their fan base.

Fortnite champion Ninja shares a photo of IGTV launch partners gathered backstage at the press event

Meanwhile, Instagram hasn’t committed to a monetization or revenue-sharing strategy for IGTV. Systrom said at the launch that “There’s no ads in IGTV today,” but noted it’s “obviously a very reasonable place [for ads] to end up.” Without enough views, though, ads won’t earn enough for a revenue split to incentivize creators. Perhaps Instagram will heavily integrate its in-app shopping features and sponsored content partnerships, but even those rely on having more traffic. Vine withered at Twitter in part from creators bailing due to its omission of native monetization options.

So how does IGTV solve the chicken-and-egg problem? It may need to swallow its pride and pay early adopters directly for content until it racks up enough views to offer sustainable revenue sharing. Instagram has never publicly copped to paying for content before, unlike its parent Facebook, which offered stipends ranging into the millions of dollars for publishers to shoot Live broadcasts and long-form Watch shows. Neither have led to a booming viewership, but perhaps that’s because Facebook has lost its edge with the teens who love video.

Instagram could do better if it paid the right creators to weather IGTV’s initial slim pickings. Settling on ad strategy creators can count on earning money from in the future might also get them to hang tight. Those deals could mimic the 55 percent split of mid-roll ad breaks Facebook gives creators on some videos. But again, the views must come first.

Alternatively, or additionally, it could double down on the launch strategy of luring creators with the potential to become the big fish in IGTV’s small-for-now pond. Backroom deals to trade being highlighted in its IGTV algorithm in exchange for high-quality content could win the hearts of these stars and their managers. Instagram would be wise to pair these incentives with vertical long-form video content creation workshops. It could bring its community, product and analytics leaders together with partnered stars to suss out what works best in the format and help them shoot it.

The cross-promo spigot

Once there’s something worth watching on IGTV, the company could open the cross-promo traffic spigot. At first, Instagram would send notifications about top content or IGTV posts from people you follow, and call them out with a little orange text banner atop its main app. Now it seems to understand it will need to be more coercive.

Last month, TechCrunch spotted Instagram showing promos for individual IGTV shows in the middle of the feed, hoping to redirect eyeballs there. And today, we found Instagram getting more aggressive by putting a bigger call out featuring a relevant IGTV clip with preview image above your Stories tray on the home screen. It may need to boost the frequency of these cross-promotions and stick them in-between Stories and Explore sections as well to give IGTV the limelight. These could expose users to creators they don’t follow already but might enjoy.

It’s still early but I do think there’s a lot of potential when they figure out two things since the feature is so new,” says John Shahidi, who runs the Justin Bieber-backed Shots Studios, which produces and distributes content for Lele Pons, Rudy Mancuso and other Insta celebs. “1. Product. IGTV is not in your face so Instagram users aren’t changing behavior to consume. Timeline and Instagram Stories are in your face so those two are the most used features. 2. Discoverability. I want to see videos from people I don’t follow. Interesting stuff like cooking, product review, interesting content from brands but without following the accounts.” In the meantime, Shots Studios is launching a vertical-only channel on YouTube that Shahidi believes is the first of its kind.

Instagram will have to balance its strategic imperative to grow the long-form video hub and avoid spamming users until they hate the brand as a whole. Some think it’s already gone too far. “I think it’s super intrusive right now,” says Tiffany Zhong, once known as the world’s youngest venture capitalist who now runs Generation Z consulting firm Zebra Intelligence. “I personally find all the IGTV videos super boring and click out within seconds (and the only time I watch them are if I accidentally tapped on the icon when I tried to go to my DMs instead).” Desperately funneling traffic to the feature before there’s enough great content to power relevant recommendations for everyone could prematurely sour users on IGTV. 

Systrom remains optimistic he can iterate his way to success. “What I want to see over the next six to 12 months is a consistent drumbeat of new features that both consumers and creators are asking for, and to look at the retention curve and say ‘are people continuing to watch? Are people continuing to upload?,'” says Systrom. “So far we are seeing that all of those are healthy. But again trying to judge a very new kind of audacious format that’s never really been done before in the first months is going to be really hard.”

Differentiator or deterrent?

The biggest question remains whether IGTV will remain devout to the orthodoxy of vertical-only. Loosening up to accept landscape videos too might nullify a differentiator, but also pipe in a flood of content it could then algorithmically curate to bootstrap IGTV’s library. Reducing the friction by allowing people to easily port content to or from elsewhere might make it feel like less of a gamble for creators deciding where to put their production resources. Instagram itself expanded from square-only to portrait and landscape photos in the feed in 2015.

My advice would be to make the videos horizontal. We’ve all come to understand vertical as ‘short form’ and horizontal as ‘long form,'” says Sayman. “It’s in the act of rotating your phone to landscape that you indicate to yourself and to your mobile device that you will not be context switching for the next few minutes, but rather intend to focus on one piece of content for an extended period of time.” This would at least give users more to watch, even if they ended up viewing landscape videos with their phones in portrait orientation.

This might be best as a last-ditch effort if it can’t get enough content flowing in through other means. But at least Instagram should offer a cropping tool that lets users manually select what vertical slice of a landscape video they want to show as they watch, rather than just grabbing the center or picking one area on the side for the whole clip. This could let creators repurpose landscape videos without things getting awkwardly half cut out of frame.

Former Facebook employee and social investor Josh Elman, who now works at Robinhood, told me he’s confident the company will experiment as much as necessary. “I think Facebook is relentless. They know that a ton of consumers watch video online. And most discover videos through influencers or their friends. (Or Netflix). Even though Watch and IGTV haven’t taken the world by storm yet, I bet Facebook won’t stop until they find the right mix.”

There’s a goldmine waiting if it does. Unlike on Facebook, there’s no Regram feature, you can’t post links, and outside of Explore you just see who you already follow on Instagram. That’s made it great at delivering friendly video and clips from your favorite stars, but leaves a gaping hole where serendipitous viewing could be. IGTV fills that gap. The hours people spend on Facebook watching random videos and their accompanying commercials have lifted the company to over $13 billion in revenue per quarter. Giving a younger audience a bottomless pit of full-screen video could produce the same behavior and profits on Instagram without polluting the feed, which can remain the purest manifestation of visual feed culture. But that’s only if IGTV can get enough content uploaded.

Puffed up by the success of besting its foe Snapchat, Instagram assumed it could take the long-form video world by storm. But the grand entrance at its debutante ball didn’t draw enough attention. Now it needs to take a different tack. Tone down the cross-promo for the moment. Concentrate on teaching creators how to find what works on the format and incentivizing them with cash and traffic. Develop some must-see IGTV and stoke a viral blockbuster. Prove the gravity of extended, personality-driven vertical video. Only then should it redirect traffic there from the feed, Stories, and Explore.

YouTube’s library wasn’t built overnight, and neither will IGTV’s. Facebook’s deep pockets and the success of Instagram’s other features give it the runway necessary to let IGTV take off. With 1 billion monthly users, and 400 million daily Stories users gathered in just two years, there are plenty of eyeballs waiting to be seduced. Systrom concludes, “Everything that is great starts small.” IGTV’s destiny will depend on Instagram’s patience.

25 Aug 2018

Amazon isn’t the only tech company getting tax breaks

Amazon has a big target on its back these days, and because of its size, scope and impact on local business, critics are right to look closely at tax breaks and other subsidies they receive. There is nothing wrong with digging into these breaks to see if they reach the goals governments set in terms of net new jobs. But Amazon isn’t alone here by any means. Many states have a big tech subsidy story to tell, and it isn’t always a tale that ends well for the subsidizing government.

In fact, a recent study by the watchdog group, Good Jobs First, found states are willing to throw millions at high tech companies to lure them into building in their communities. They cited three examples in the report including Tesla’s $1.25 billion 20-year deal to build a battery factory in Nevada, Foxconn’s $3 billion break to build a display factory in Wisconsin and the Apple data center deal in Iowa, which resulted in a $214 million tax break.

Good Jobs First executive director Greg LeRoy doesn’t think these subsidies are justifiable and they take away business development dollars from smaller businesses that tend to build more sustainable jobs in a community.

“The “lots of eggs in one basket” strategy is especially ill-suited. But many public leaders haven’t switched gears yet, often putting taxpayers at great risk, especially because some tech companies have become very aggressive about demanding big tax breaks. Companies with famous names are even more irresistible to politicians who want to look active on jobs,” LeRoy and his colleague Maryann Feldman wrote in a Guardian commentary last month.

It doesn’t always work the way you hope

While these deals are designed to attract the company to an area and generate jobs, that doesn’t always happen. The Apple-Iowa deal, for example, involved 550 construction jobs to build the $1.3 billion state-of-the-art facility, but will ultimately generate only 50 full-time jobs. It’s worth noting that in this case, Apple further sweetened the pot by contributing “up to $100 million” to a local public improvement fund, according to information supplied by the company.

One thing many lay people don’t realize, however, is that in spite of the size, cost and amount of real estate of these mega data centers, they are highly automated and don’t require a whole lot of people to run. While Apple is giving back to the community around the data center, in the end, if the goal of the subsidy is permanent high-paying jobs, there aren’t very many involved in running a data center.

It’s not hard to find projects that didn’t work out. A $2 million tax subsidy deal between Massachusetts and Nortel Networks in 2008 to keep 2200 jobs in place and add 800 more failed miserably. By 2010 there were just 145 jobs left at the facility and the tax incentive lasted another 4 years, according to a Boston.com report.

More recent deals come at a much higher price. The $3 billion Foxconn deal in Wisconsin was expected to generate 3000 direct jobs (and another 22,000 related ones). That comes out to an estimated cost of between $15,000 and $19,000 per job annually, much higher than the typical cost of $2457 per job, according to data in the New York Times.

Be careful what you wish for

Meanwhile states are falling all over themselves with billions in subsidies to give Amazon whatever its little heart desires to build HQ2, which could generate up to 50,000 jobs over a decade if all goes according to plan. The question, as with the Foxconn deal, is whether the states can truly justify the cost per job and the impact on infrastructure and housing to make it worth it?

What’s more, how do you ensure that you get a least a modest return on that investment? In the case of the Nortel example in Massachusetts, shouldn’t the Commonwealth have protected itself against a catastrophic failure instead of continuing to give the tax break for years after it was clear Nortel wasn’t able to live up to its side of the agreement?

Not every deal needs to be a home run, but you want to at least ensure you get a decent number of net new jobs out of it, and that there is some fairness in the end, regardless of the outcome. States also need to figure out the impact of any subsidy on other economic development plans, and not simply fall for name recognition over common sense.

These are questions every state needs to be considering as they pour money into these companies. It’s understandable in post-industrial America, where many factory jobs have been automated away that states want to lure high-paying high tech jobs to their communities, but it’s still incumbent upon officials to make sure they are doing due diligence on the total impact of the deal to be certain the cost is justified in the end.

25 Aug 2018

48 hours left to apply for Startup Battlefield at Disrupt Berlin 2018

“Nothing is more expensive than a missed opportunity.” H. Jackson Brown, Jr. threw down a heavy dose of truth with those wise words. It’s almost like he knew the opportunity to apply to Startup Battlefield at Disrupt Berlin 2018 on November 29-30 will evaporate — in just about 48 hours — on August 27 at 9 p.m. PST. Don’t make an expensive mistake. Submit your application here, today.

What does opportunity look like as a Startup Battlefield competitor at Disrupt Berlin? Excellent question. It’s global exposure as you launch your company in front of the best and brightest investors, technologists, movers and shakers and media outlets across Europe and beyond. Investors like Sonali De Rycker of Accel and Saul Klein at LocalGlobe — and that’s just for starters.

In a tough vetting process, our experienced TechCrunch editors review every application — our acceptance rate is typically 3 percent. They’ll choose up to 15 startups to participate, and the founders of each team receive free pitch coaching from our expert Startup Battlefield team. You. Will. Be. Ready.

On the big day, teams get just six minutes each to present a live demo to an expert panel of investors and entrepreneurs. The judges follow each team pitch with an intense, six-minute Q& A — that pitch coaching will come in handy for sure.

Judges select five teams to move on to a semi-final round of pitching and more questions with a fresh set of judges. And then only one team walks away victorious, hoists the Disrupt Cup and takes home the $50,000 USD equity-free cash prize.

Even if you don’t win Startup Battlefield, you still benefit from the extensive media and investor exposure. The competition takes place in front of a live audience with thousands of people, including investors, journalists and influential technologists. Plus, we live-stream the entire Startup Battlefield competition to a global audience on TechCrunch.com, YouTube, Facebook and Twitter (and make it available later, on-demand). It’s unlike anything you’ve experienced to date, and it can be life changing.

Startup Battlefield takes place at Disrupt Berlin 2018 on November 29-30. The application window closes on August 27 at 9 p.m. PST. Take note — TechCrunch does not charge any fees or take any equity, and participating in Startup Battlefield is 100 percent free. Missing this opportunity truly would be expensive. Apply right now.

25 Aug 2018

Elon Musk: Tesla will remain a public company

Tesla will remain a public company, CEO Elon Musk said Friday night, less than three weeks after he announced to the world via Twitter that he was considering taking the electric automaker private at $420 a share.

Musk, who posted the announcement via Tesla’s blog, said Friday that after speaking with shareholders and investigating the process of taking the company private he believes the better path is for Tesla to remain public. Musk met with Tesla’s board of directors Thursday and told him his decision. The board agreed, he wrote.

Here’s an excerpt:

Given the feedback I’ve received, it’s apparent that most of Tesla’s existing shareholders believe we are better off as a public company. Additionally, a number of institutional shareholders have explained that they have internal compliance issues that limit how much they can invest in a private company. There is also no proven path for most retail investors to own shares if we were private. Although the majority of shareholders I spoke to said they would remain with Tesla if we went private, the sentiment, in a nutshell, was “please don’t do this.”

I knew the process of going private would be challenging, but it’s clear that it would be even more time-consuming and distracting than initially anticipated. This is a problem because we absolutely must stay focused on ramping Model 3 and becoming profitable. We will not achieve our mission of advancing sustainable energy unless we are also financially sustainable.

That said, my belief that there is more than enough funding to take Tesla private was reinforced during this process.

Friday night’s announcement closes a tumultuous 17 days that began with Musk tweeting that he secured funding and was considering taking Tesla private. The tweet wasn’t warmly embraced by the Tesla board or many shareholders. It also prompted the U.S. Securities and Exchange Commission to investigate.

https://twitter.com/elonmusk/status/10268726522903797

While this 17-day ride might be over, the questions over Musk’s behavior (and possible drug use) and the company’s future are likely not.

25 Aug 2018

Fortnite’s Android installer shipped with an Epic security flaw

Google has clapped back in tremendous fashion at Epic Games, which earlier this month decided to make the phenomenally popular Fortnite available for Android via its own website instead of Google’s Play Store. Unfortunately, the installer had a phenomenally dangerous security flaw in it that would allow a malicious actor to essentially install any software they wanted. Google wasted exactly zero time pointing out this egregious mistake.

By way of a short explanation why this was even happening, Epic explained when it announced its plan that it would be good to have “competition among software sources on Android,” and that the best would “succeed based on merit.” Everyone of course understood that what he meant was that Epic didn’t want to share the revenue from its cash cow with Google, which takes 30 percent of in-app purchases.

Many warned that this was a security risk for several reasons, for example that users would have to enable app installations from unknown sources — something most users have no reason to do. And the Play Store has other protections and features, visible and otherwise, that are useful for users.

Google, understandably, was not amused with Epic’s play, which no doubt played a part in the decision to scrutinize the download and installation process — though I’m sure the safety of its users was also a motivating factor. And wouldn’t you know it, they found a whopper right off the bat.

In a thread posted a week after the Fortnite downloader went live, a Google engineer by the name of Edward explained that the installer basically would allow an attacker to install anything they want using it.

The Fortnite installer basically downloads an APK (the package for Android apps), stores it locally, then launches it. But because it was stored on shared external storage, a bad guy could swap in a new file for it to launch, in what’s called a “man in the disk” attack.

And because the installer only checked that the name of the APK is right, as long as the attacker’s file is called “com.epicgames.fortnite,” it would be installed! Silently, and with lots of extra permissions too, if they want, because of how the unknown sources installation policies work. Not good!

Edward pointed out this could be fixed easily and in a magnificently low-key bit of shade-throwing helpfully linked to a page on the Android developer site outlining the basic feature Epic should have used.

To Epic’s credit, its engineers jumped on the problem immediately and had a fix in the works by that very afternoon and deployed by the next one. Epic InfoSec then requested Google to wait 90 days before publishing the information.

As you can see, Google was not feeling generous. One week later (that’s today) and the flaw has been published on the Google Issue Tracker site in all its… well, not glory exactly. Really, the opposite of glory. This seems to have been Google’s way of warning any would-be Play Store mutineers that they would not be given gentle handling.

Epic Games CEO Tim Sweeney was likewise unamused. In a comment provided to Android Central — which, by the way, predicted that this exact thing would happen — he took the company to task for its “irresponsible” decision to “endanger users.”

Epic genuinely appreciated Google’s effort to perform an in-depth security audit of Fortnite immediately following our release on Android, and share the results with Epic so we could speedily issue an update to fix the flaw they discovered.

However, it was irresponsible of Google to publicly disclose the technical details of the flaw so quickly, while many installations had not yet been updated and were still vulnerable.

An Epic security engineer, at my urging, requested Google delay public disclosure for the typical 90 days to allow time for the update to be more widely installed. Google refused. You can read it all at https://issuetracker.google.com/issues/112630336

Google’s security analysis efforts are appreciated and benefit the Android platform, however a company as powerful as Google should practice more responsible disclosure timing than this, and not endanger users in the course of its counter-PR efforts against Epic’s distribution of Fortnite outside of Google Play.

Indeed, companies really should try not to endanger their users for selfish reasons.

24 Aug 2018

The lobbying is fast and furious as gig companies seek relief from pro-labor Supreme Court ruling

For four years, Edhuar Arellano has left his house at 7 a.m. on weekdays to drive customers around the Bay Area for Lyft and Uber . Most days, he doesn’t get home to Santa Clara until 11 p.m. On weekends, he delivers pizzas to make ends meet.

Like a lot of drivers plugging in to ride-hailing apps for work, he likes the flexibility the gig economy has offered. But given the choice, Arellano says he wishes he could just become an employee. That would get him paid vacation, benefits, overtime, his own health insurance and perhaps more say over his working conditions.

“We need to accept whatever they want,” said the 55-year-old father of two grown children. “I can’t control anything.”

That quandary is behind a ferocious battle quietly playing out in the Capitol in the final days of the legislative session, which ends Aug. 31. Lobbyists for ride-sharing companies and the California Chamber of Commerce are scrambling to delay until next year (and the next governor’s administration) a far-reaching California Supreme Court decision that could grant Arellano’s wish—and, businesses fear, undermine the entire gig economy.

The April ruling, involving the nationwide delivery company Dynamex Operations West Inc. and its contract drivers, established a new test for enforcement of California wage laws, and made it much harder for companies in California to claim that independent contractors are not actually employees.

Though the ruling only applies to California, the state’s labor force is so huge that it has already had national impact. Shortly after the decision, U.S. Sen. Bernie Sanders of Vermont introduced a bill to make a version of California’s new rule the federal standard, a move that only added urgency to employers’ calls for state lawmakers to hit the pause button on implementing the ruling.

“Businesses are very concerned. The key is who’s going to be sued here in the near future,” said Allan Zaremberg, president of the California Chamber, which represents 50,000 businesses.

They should be, says labor leader Caitlin Vega, who has been similarly lobbying Capitol Democrats to refrain from meddling and let the Supreme Court decision move forward.

“Companies have made so much money already at the expense of workers,” Vega, the legislative director of the California Labor Federation said Tuesday during a harried break between Capitol meetings. “We really see the Dynamex decision as core to rebuilding the middle class.”

State and federal labor laws give employees a wide range of worker protections, from overtime pay and minimum wages to the right to unionize. But those rights don’t extend to independent contractors, whose ranks have grown dramatically in the gig economy.

Apps such as Uber, TaskRabbit and DoorDash, which match customers and services online and in real time, have given workers an unprecedented ability to freelance but they also have blurred traditional employer-employee relationships and, labor advocates say, invited exploitation.

Some 2 million people, from Lyft drivers to construction workers, consider themselves independent contractors in California. In 2017, according to the Bureau of Labor Statistics, about one in 14 workers was an independent contractor nationally.

If state lawmakers don’t rewrite the law or stall its implementation for a few months, as businesses want—which the Legislature can legally do, though the clock is ticking—the Dynamex decision will subject businesses in California to a standard that is tougher than the federal government’s or most states’.

Known as the “ABC test,” the standard requires companies to prove that people working for them as independent contractors are:

  • A) Free from the company’s control when they’re on the job;
  • B) Doing work that falls outside the company’s normal business;
  • C) And operating an independent business or trade beyond the job for which they were hired.

That’s a high bar for the many companies whose bottom lines have depended on large numbers of contractors to deliver a particular service. According to the business lobby, in the months since the Dynamex decision, law firms have received 1,200 demands for arbitration and 17 class action lawsuits.

Last month, business leaders sent a letter to members of Gov. Jerry Brown’s administration, warning that the new test would “decimate businesses,” and urging the governor and Legislature to suspend and then limit the court’s ruling to only workers involved in the Dynamex case. The letter also asked that the decision not apply to other contractors for the next two years.

Not all those contractors are in tech, Chamber head Zaremberg points out. Emergency room doctors and accountants, for example, could also be impacted. Emergency hospitals and trauma centers contract their doctors through medical groups, and doctors generally work at a combination of hospitals and community clinics.

Photo: shapecharge / iStock / Getty Images Plus

Dr. Aimee Mullen, president of the California chapter of American College of Emergency Physicians, confirms that ER docs are among those uncertain about their contractor status.

“A lot of our members use that model. It’s choice. They like flexibility. They like working at multiple hospitals,” Mullen said.

The California Labor Federation’s Vega contends that, disruptive though it may be, the Dynamex ruling is the right one, particularly on worker exploitation. The core group affected tends to be low-income and immigrant workers, she said.

“The Dynamex decision was a victory for working people—truck drivers who are cheated out of wages, warehouse workers forced to risk their health and gig economy workers who want to be treated with dignity and respect,” Vega wrote in a Sacramento Bee op-ed.

Some workers see room for hybrid solutions. Edward Escobar, a San Francisco ride-hail driver of four years and founder of the Alliance for Independent Workers, a group formed by drivers three years ago, says he has seen a big decrease in how much these companies compensate drivers without a commensurate increase in control over working conditions.

Escobar believes gig companies are trying to have it both ways, and should give their workers either true independence or full employment. His proposal: Let workers choose their own classification, with wage and benefit protection for those who choose to be employees, and more control for contractors over which rides to take and what prices to set.

“These tech titans have been taking advantage of these gray areas,” Escobar said.

Assembly Speaker Anthony Rendon, a Paramount Democrat, said earlier this month that while the Legislature is eager to delve into workforce issues, leaders do not have adequate time to act on it before the session ends next week.

“The Dynamex​ decision strikes at the core of what the future of work looks like in our society,” Rendon said in a statement. “From the decline of union membership to court rulings like the Janus decision, we’ve seen the continual erosion of workers’ rights. If the Legislature is to take action, we must do so thoughtfully with that in mind. That will not happen in the last three weeks of the legislative session.”

Nor are the stakes likely to be lowered for workers like Arellano.

“If I don’t work, I have no money,” said the Lyft and Uber driver. “Everything is so expensive in Santa Clara and the Bay Area.”

CALmatters.org is a nonprofit, nonpartisan media venture explaining California policies and politics.

24 Aug 2018

Facebook and Microsoft briefed state officials on election security efforts today

So much for summer Fridays. Yesterday, BuzzFeed reported that a dozen tech companies, including Facebook, Google, Microsoft and Snapchat, would meet at Twitter headquarters on Friday to discuss election security. For two of them, that wasn’t the only meeting in the books.

In what appears to be a separate event on Friday, Facebook and Microsoft also met with the Department of Homeland Security, the FBI and two bodies of state election officials, the National Association of State Election Directors (NASED) and the National Association of Secretaries of State (NASS), about their election security efforts.

The discussion was the second of its kind connecting DHS, Facebook and state election officials on “actions being taken to combat malicious interference operations.” The meetings offer two very different perspectives on threats to election security. States are largely concerned with securing voter databases and election systems, while private tech companies are waging a very public war against coordinated disinformation campaigns by U.S. foreign adversaries on their platforms. Social media platforms and election systems themselves are two important yet usually disconnected fronts in the ongoing war against Russian election interference.

more 2018 US Midterm Election coverage

“Effectively combatting coordinated information operations requires many parts of society working together, which is why Facebook believes so strongly in the need for collaboration between law enforcement, government agencies, security experts and other companies to confront these growing threats,” Facebook VP of Public Policy Kevin Martin said of the meeting.

“We are grateful for the opportunity to brief state election officials on a recent call convened by DHS and again today as part of our continued effort to develop collaborative relationships between government and private industry.”

Curiously, while Microsoft and Facebook attended the DHS-hosted meeting, it doesn’t look like Twitter did. To date, Twitter and Facebook have faced the most fallout for foreign interference on their platforms meant to influence American politics, though Google was also called to Congress to testify on the issue last fall. When reached, Twitter declined to comment on its absence, though the company was reportedly playing host to the other major tech election security meeting today.

The meeting with state officials sounds like it was largely informative in nature, with Facebook and Microsoft providing insight on their respective efforts to contain foreign threats to election integrity. On Tuesday, Microsoft revealed that its Digital Crimes Unit secured a court order to take down six domains created by Russia’s GRU designed to phish user credentials. Half of the phishing domains were fake versions of U.S. Senate websites.

“No one organization, department or individual can solve this issue alone, that’s why information sharing is so important,” said Microsoft VP of Customer Security and Trust Tom Burt. “To really be successful in defending democracy, technology companies, government, civil society, the academic community and researchers need to come together and partner in new and meaningful ways.”

24 Aug 2018

UK phone giant EE hit by another security lapse

For the second time this week, U.K. phone giant EE has fixed a security lapse, which allowed a security researcher to gain access to an internal site.

The researcher, who goes by the pseudonym Six, found the company’s internal training site indexed on Google. (We’re not linking to the page as it remains an active site.) Although the site required an employee username and password to log in, the researcher found that an “admin” account existed, of which anyone with the answer to the secret question could reset the password.

It turns out that secret question could have been stronger.

“What is your eye color,” the researcher told TechCrunch. “I tried loads of colors and they all give an error,” he said. “The answer was simply ‘brown,'” he said.

From there, he gained access to the entire internal training site.

EE is the largest phone network in the U.K. with more than 30 million users.

TechCrunch reported the security lapse to the company on Wednesday. A spokesperson for EE said a fix was implemented early Thursday, and thanked the researcher.

“This account has now been disabled and we have also changed the password and security question for the account,” said a spokesperson. “No customer data is, or has been, at risk as the user account on the training website only gave access to a dummy environment with fake accounts.”

But the researcher disputed part of EE’s response, accusing the company of downplaying the security incident.

The researcher shared several screenshots with TechCrunch of the site. According to the site’s login page, the portal is the “home of training” for all EE staff. Employees are given access in the first week of their start date, and can access the site for the first time with a password which is their “surname all in lower case.”

Some screenshots showed dummy data, but others showed course content and employee knowledge base resources. He said that he had access to training on linked organizations, including Orange and Plusnet.

Although the researcher found no employee or customer data, he said the admin account allowed him to grant himself “any permissions” he wanted, and change the access of any other group of users, he said.

“I didn’t do any of that because of the law, but that doesn’t mean a malicious attacker couldn’t have done it,” he said.

Earlier this week, EE fixed a vulnerability that allowed customers to gift their own or linked accounts unlimited data for free. The company fixed the bug within two days.

24 Aug 2018

Hear how to build a brand from Tina Sharkey, Emily Heyward and Philip Krim at Disrupt

For startups, especially e-commerce companies, branding is everything.

A slogan, an ad, even the design of the logo can make the difference between success and failure. But understanding how to develop a brand and strategically evolve that brand over time isn’t the easiest task. Luckily, three experts are coming to Disrupt to talk through the ins and outs.

Red Antler’s Emily Heyward, Brandless’ Tina Sharkey, and Casper CEO Philip Krim will join us at TC Disrupt SF in early September, and it’s a conversation you won’t want to miss.

Emily Heyward cofounded Red Antler in 2007 after working in advertising at Saatchi & Saatchi. She graduated magna cum laude from Harvard with a degree focused on postmodern theory and consumer culture. At Red Antler, she serves as Chief Strategist and has helped brands like AllBirds, BirchBox and Casper find their unique voice in a cluttered market.

Tina Sharkey hails from Brandless, the new e-commerce company that brings its own line of household and food items to the market for $3 each. Brandless has raised nearly $300 million since launching in 2016, an impressive feat on its own. What makes Brandless so attractive to investors? Tina Sharkey’s unwavering focus on understanding her customers. Alongside democratizing these products, and bringing eco-friendly and FDA-approved ‘safer choice’ goods to the masses, Sharkey makes data around consumer behavior a priority at the company, which helps with insights on how to sell Brandless’s portfolio of more than 300 products.

Heyward and Sharkey will be joined by Casper CEO and cofounder Philip Krim. Casper sprung onto the market in 2013 with a relatively simple premise: sell a quality mattress for cheaper. While it makes sense, it’s not the sexiest brand proposition. But with the help of Heyward and Red Antler, and a keen sense of the type of customer who chooses Casper over a traditional mattress, Casper has become one of the most effectively marketed brands out there right now.

We’re thrilled to hear from this trio of greatness at Disrupt SF.

Check out the full agenda here. Tickets are still available even though the show is less than two weeks away. Grab one here.

24 Aug 2018

Last chance to buy a Disrupt SF 2018 Startup Alley Exhibitor Package

Last call, folks! Last call to take advantage of the potentially life-changing connections and opportunities that await early-stage founders in Startup Alley. Today is the final day you can secure an exhibit table in Startup Alley at Disrupt San Francisco 2018 — which takes place September 5-7. Buy your Disrupt SF Startup Alley Exhibitor Package today before the clock strikes 5 p.m. PT.

Picture it. You and more than 1,200 exhibitors and sponsors showcasing the latest and greatest in tech products, services and platforms. We fully expect 10,000 or more attendees to descend on Moscone Center West — we’re talking technologists, investors, tech journalists, founders, marketers and entrepreneurs. And this is the last day to snag a pass that lets you place your early-stage startup smack dab in their path.

Here’s what comes with a Startup Alley Exhibitor Package:

  • Two Founder passes for all three days of Disrupt SF 2018
  • One day to exhibit on the Startup Alley show floor
  • Use of CrunchMatch — our curated investor-to-startup matching platform
  • Access to The Main Stage, The Next Stage, The Q&A Stage, The Showcase Stage
  • All workshops
  • Access to the attendee list and ability to message attendees with the Disrupt App
  • Attend the TC After Party

And who knows? Your startup might be one of two selected to compete as a Wild Card in Startup Battlefield — our epic pitch competition with an equally epic grand prize of $100K. If you don’t believe us, check out this story from our Wild Card winner from last year:

If you’re wondering whether exhibiting is worth your time and effort, we get it. Consider what Vlad Larin, co-founder of Zeroqode, has to say about his experience:

“Startup Alley is an outstanding opportunity. We showed our technology to the world and had meaningful conversations with investors, accelerators, incubators, solo founders and developers. Give it your all, and you will not be disappointed.”

Startup Alley goes down at Disrupt San Francisco 2018 — which takes place September 5-7. You have today and today only to grab a table. Buy your Startup Alley Exhibitor Package now.