Category: UNCATEGORIZED

15 Nov 2019

LA warns of ‘juice-jacking’ malware, but admits it has no cases

Los Angeles’ district attorney is warning travelers to avoid public USB charging points because “they may contain dangerous malware.”

Reading the advisory, you might be forgiven for thinking that every USB outlet you see is just waiting for you to plug in your phone so it can steal your data. This so-called “juice-jacking” attack involves criminals loading malware “on charging stations or cables they leave plugged in at the stations so they may infect the phones and other electronic devices of unsuspecting users,” it reads. “The malware may lock the device or export data and passwords directly to the scammer.”

But the county’s chief prosecutor’s office told TechCrunch said that it has “no cases” of juice-jacking on its books, though it said there are known cases on the east coast.When asked where those cases were, the spokesperson did not know. And when asked what prompted the alert to begin with, the spokesperson said it was part of “an ongoing fraud education campaign.”

Which begs the question — why?

Security researcher Kevin Beaumont tweeted that he hasn’t seen “any evidence of malware being used in the wild on these things.” In fact, ask around and you’ll find very little out there. Several security researchers have dropped me messages saying they’ve seen proof-of-concepts, but nothing actively malicious.

Juice-jacking is a real threat, but it’s an incredibly complicated and imperfect way to attack someone when there are far easier ways.

The idea, though — that you can plug in your phone and have your secrets stolen — is not entirely farfetched. Over the years there have been numerous efforts to demonstrate that it’s possible. As ZDNet points out in its coverage of the juice-jacking warning, the FBI sent out a nationwide alert about the threat after security researcher Samy Kamkar developed an Ardunio-based implant designed to look like a USB charger to wirelessly sniff the air for leaky key strokes. And just earlier this year, a security researcher developed an iPhone charger cable clone that let a nearby hacker run commands on the vulnerable computer.

LA recommend using an AC power outlet and not a charging station, and to take your cables with you. That’s sound advice, but it’s just one of many things you need to do to keep your devices and data safe.

15 Nov 2019

LA warns of ‘juice-jacking’ malware, but admits it has no cases

Los Angeles’ district attorney is warning travelers to avoid public USB charging points because “they may contain dangerous malware.”

Reading the advisory, you might be forgiven for thinking that every USB outlet you see is just waiting for you to plug in your phone so it can steal your data. This so-called “juice-jacking” attack involves criminals loading malware “on charging stations or cables they leave plugged in at the stations so they may infect the phones and other electronic devices of unsuspecting users,” it reads. “The malware may lock the device or export data and passwords directly to the scammer.”

But the county’s chief prosecutor’s office told TechCrunch said that it has “no cases” of juice-jacking on its books, though it said there are known cases on the east coast.When asked where those cases were, the spokesperson did not know. And when asked what prompted the alert to begin with, the spokesperson said it was part of “an ongoing fraud education campaign.”

Which begs the question — why?

Security researcher Kevin Beaumont tweeted that he hasn’t seen “any evidence of malware being used in the wild on these things.” In fact, ask around and you’ll find very little out there. Several security researchers have dropped me messages saying they’ve seen proof-of-concepts, but nothing actively malicious.

Juice-jacking is a real threat, but it’s an incredibly complicated and imperfect way to attack someone when there are far easier ways.

The idea, though — that you can plug in your phone and have your secrets stolen — is not entirely farfetched. Over the years there have been numerous efforts to demonstrate that it’s possible. As ZDNet points out in its coverage of the juice-jacking warning, the FBI sent out a nationwide alert about the threat after security researcher Samy Kamkar developed an Ardunio-based implant designed to look like a USB charger to wirelessly sniff the air for leaky key strokes. And just earlier this year, a security researcher developed an iPhone charger cable clone that let a nearby hacker run commands on the vulnerable computer.

LA recommend using an AC power outlet and not a charging station, and to take your cables with you. That’s sound advice, but it’s just one of many things you need to do to keep your devices and data safe.

15 Nov 2019

Takeaways from Nvidia’s latest quarterly earnings

Nvidia has been on a wild growth ride the past five years. Surfing a wave around AI deep learning and cryptocurrency where its specialized chip architecture is among the highest performing, the company’s share price rose from the low $20s in late 2014 to eventually soar to almost $300 in September 2018. And then crypto winter set in, and within weeks the company’s market cap was sliced nearly in half as crypto miners canceled their orders and inventories at Nvidia started building up a glut of chips.

Since that nadir in late 2018, the company has mostly been on the upswing as it has pushed expansion into a variety of other verticals like automotive, most notably by announcing the purchase of Israeli chip maker Mellanox for $6.9 billion in an all cash deal.

So with its latest earnings announcement coming after the bell yesterday, the big questions were how it was continuing to navigate chip inventories, and whether its transaction with Mellanox would close. The company ultimately presented a bit of a mixed bag, and Wall Street seems to have barely budged on the stock price as we all wait resolution on some of the key questions facing the company.

Before we dive into the analysis, first the high level numbers for Q3, which ended on October 27: top-line revenues declined slightly to just above $3 billion, from roughly $3.2 billion in the year ago quarter. Gross profits were flat from a year ago, but net income was down 27% to $899 million, mostly due to higher R&D costs and lower income from operations. Earnings per share was $1.47, down from $2.02 a year ago.

Now though, there were some more interesting takeaways from the results beyond the sort of lukewarm numbers emanating off the income statements.

China trade war still affecting Nvidia through Mellanox

15 Nov 2019

Web Summit cancels next year’s Rise conference over tension in Hong Kong

The ongoing tension in Hong Kong between the government and pro-democracy protesters continues to spill into tech domain.

Rise, the largest tech conference in Asia, has cancelled its next year’s event because of the “Hong Kong situation,” its organizer Web Summit said.

The organizer said it is postponing the sixth edition of its annual conference, which is held in Hong Kong, to March 2021 from March 2020. Web Summit, which hosts similar large scale conference in other parts of the world, made the announcement today in an email to previous attendees. A spokesperson confirmed the veracity of the email to TechCrunch.

“Over recent months, we have been monitoring the ongoing situation in Hong Kong. Our number one concern is the wellbeing, safety, and security of attendees at our events,” it said in a statement.

“Given the uncertainty of the situation by early 2020 and after consulting with experts and advisories, we have decided to postpone RISE until 2021.”

In recent years, Rise has emerged as the largest tech conference in Asia. Some of its recent speakers have included top executives of Uber, Byju’s, Grab, Gojek, Razor, Stripe, as well as many key partners from top VC funds and officials from several governments.

This year, the conference attracted over 16,000 attendees ranging from the “world’s leading founders, Fortune 500 CEOs, investors, media, and the most promising startups from over 100 countries,” according to official figures provided by Rise.

Web Summit’s announcement today comes hours after Clockenflap, the biggest music festival in Hong Kong, was cancelled citing the same reason. American singer-songwriter Halsey, rapper Lil Pump, British band Mumford & Sons and Japanese headbangers Babymetal were set to play at the festival. Several more events have postponed or cancelled in recent weeks.

15 Nov 2019

WeWork gives 0 forks, and Docker containerizes its future into a casket

Hello and welcome back to Equity, TechCrunch’s venture capital-focused podcast, where we unpack the numbers behind the headlines.

This week Kate was in China, so TechCrunch’s Danny Crichton and Alex took the helm while she was out grilling Lime. So, with our producer (the excellent Mr. Gates) in San Francisco and Danny in New York and Alex in the provinces, we got into the following to start:

  • Jetpack Aviation and it’s seed round to build a flying motorcycle, because of course why not
  • An endurance racing startup raising money from Usain Bolt
  • Norwest’s mega new $2B fund
  • EQT’s mega new $750 million rumored European growth fund
  • And a new round for Peanut, the social network for mothers

Pivoting into the biggest news from the week, 1Password raised a comically-large $200 million Series A round of funding. The firm quite obviously hadn’t raised much capital before but had grown to be quite large. Hence the large check. Recall that Series A really means a company’s first institutional round, not a specific dollar range.

Next we discussed DoorDash and its possible $100 million add-on to its $600 million round from earlier this year. The new capital should keep the on-demand technology company’s valuation pegged just above where it was set during its preceding round. So, a down round this is not.

Meanwhile, Docker received a $35M investment from Benchmark and sold much of its business to Marantis, which has all the appearances of a recap for the formerly high-flying unicorn.

What else? JUUL is laying off staff, WeWork is still losing an ocean of dollars, and Line is partnering up with Yahoo Japan.

Equity drops every Friday at 6:00 am PT, so subscribe to us on Apple PodcastsOvercastSpotify and all the casts.

15 Nov 2019

Despite bans, Giphy still hosts self-harm, hate speech, and child sex abuse content

Image search engine Giphy bills itself as providing “fun and safe way” to search and create animated GIFs. But despite its ban on illicit content, the site is littered with self-harm and child sex abuse imagery, TechCrunch has learned.

A new report from Israeli online child protection startup L1ght — previously AntiToxin Technologies — has uncovered a host of toxic content hiding within the popular GIF-sharing community, including illegal child abuse content, depictions of rape, and other toxic imagery associated with topics like white supremacy and hate speech. The report, shared exclusively with TechCrunch, also showed content encouraging viewers into unhealthy weight loss and glamorizing eating disorders.

TechCrunch verified some of the company’s findings by searching the site using certain keywords. (We did not search for terms that may have returned child sex abuse content as doing so would be illegal.) Although Giphy blocks many hashtags and search terms from returning results, search engines like Google and Bing still cache images with certain keywords.

When we tested using several words associated with illicit content, Giphy sometimes showed content from its own results. When it didn’t return any banned materials, search engines often returned a stream of would-be banned results.

L1ght develops advanced solutions to combat online toxicity. Through its tests, one search of illicit material returned 195 pictures on the first search page alone. L1ght’s team then followed tags from one item to the next, uncovering networks of illegal or toxic content along the way. The tags themselves were often innocuous in order help users escape detection, but they served as a gateway to the toxic material.

Despite a ban on self-harm content, researchers found numerous keywords and search terms to find the banned content. We have blurred this graphic image. (Image: TechCrunch)

Many of the more extreme content — including images of child sex abuse — are said to have been tagged using keywords associated with known child exploitation sites.

We are not publishing the hashtags, search terms, or sites used to access the content, but we passed on the information to the National Center for Missing and Exploited Children, a national non-profit established by Congress to fight child exploitation.

Simon Gibson, Giphy’s head of audience, told TechCrunch that content safety was of the “utmost importance” to the company and that it employs “extensive moderation protocols.” He said that when illegal content is identified, the company works with the authorities to report and remove it.

He also expressed frustration that L1ght had not contacted Giphy with the allegations first. L1ght said that Giphy is already aware of its content moderation problems.

Gibson said Giphy’s moderation system “leverages a combination of imaging technologies and human validation,” which involves users having to “apply for verification in order for their content to appear in our searchable index.” Content is “then reviewed by a crowdsourced group of human moderators,” he said. “If a consensus for rating among moderators is not met, or if there is low confidence in the moderator’s decision, the content is escalated to Giphy’s internal trust and safety team for additional review,” he said.

“Giphy also conducts proactive keyword searches, within and outside of our search index, in order to find and remove content that is against our policies,” said Gibson.

L1ght researchers used their proprietary artificial intelligence engine to uncover illegal and other offensive content. Using that platform, the researchers can find other related content, allowing them to find vast caches of illegal or banned content that would otherwise and for the most part go unseen.

This sort of toxic content plagues online platforms but algorithms only play a part. More tech companies are finding human moderation is critical to keeping their sites clean. But much of the focus to date has been on the larger players in the space, like Facebook, Instagram, YouTube, and Twitter.

Facebook, for example, has been routinely criticized for outsourcing moderation to teams of lowly paid contractors who often struggle to cope with the sorts of things they have to watch, even experiencing post-traumatic-like symptoms as a result of their work. Meanwhile, Google’s YouTube this year was found to have become a haven for online sex abuse rings, where criminals had used the comments section to guide one another to other videos to watch while making predatory remarks.

Giphy and other smaller platforms have largely stayed out of the limelight, during the past several years. But L1ght’s new findings indicate that no platform is immune to these sorts of problems.

L1ght says the Giphy users sharing this sort of content would make their accounts private so they wouldn’t be easily searchable by outsiders or the company itself. But even in the case of private accounts, the abusive content was being indexed by some search engines, like Google, Bing and Yandex, which made it easy to find. The firm also discovered that pedophiles were using Giphy as the means of spreading their materials online, including communicating with each other and exchanging materials. And they weren’t just using Giphy’s tagging system to communicate — they were also using more advanced techniques like tags placed on images through text overlays.

This same process was utilized in other communities, including those associated with white supremacy, bullying, child abuse and more.

This isn’t the first time Giphy has faced criticism for content on its site. Last year a report by The Verge described the company’s struggles to fend off illegal and banned content. Last year the company was booted from Instagram for letting through racist content.

Giphy is far from alone, but it is the latest example of companies not getting it right. Earlier this year and following a tip, TechCrunch commissioned then-AntiToxin to investigate the child sex abuse imagery problem on Microsoft’s search engine Bing. Under close supervision by the Israeli authorities, the company found dozens of illegal images in the results from searching certain keywords. When The New York Times followed up on TechCrunch’s report last week, its reporters found Bing had done little in the months that had passed to prevent child sex abuse content appearing in its search results.

It was a damning rebuke on the company’s efforts to combat child abuse in its search results, despite pioneering its PhotoDNA photo detection tool, which the software giant built a decade ago to identify illegal images based off a huge database of hashes of known child abuse content.

Giphy’s Gibson said the company was “recently approved” to use Microsoft’s PhotoDNA but did not say if it was currently in use.

Where some of the richest, largest and most-resourced tech companies are failing to preemptively limit their platforms’ exposure to illegal content, startups are filling in the content moderation gaps.

L1ght, which has a commercial interest in this space, was founded a year ago to help combat online predators, bullying, hate speech, scams, and more.

The company was started by former Amobee chief executive Zohar Levkovitz and cybersecurity expert Ron Porat, previously the founder of ad-blocker Shine, after Porat’s own son experienced online abuse in online game Minecraft. The company realized the problem with these platforms was something that had outgrown users’ own ability to protect themselves, and that technology needed to come to their aid.

L1ght’s business involves deploying its technology in similar ways as it has done here with Giphy— in order to identify, analyze, and predict online toxicity with near real-time accuracy.

15 Nov 2019

Ford’s Mustang Mach-E all-electric SUV revealed in leaked photos, prices and configurations

Ford is officially debuting its fully electric crossover SUV on Saturday, November 17 – but we got a look at the new Mach-E (which was just officially named yesterday) a couple of days early. The leak comes from Ford’s own website, as screenshotted for posterity by Jalopnick, and includes photos of most angles of the car, including the interior, as well as pricing and configuration details for the model variants available at launch.

The Mach-E will start at $43,895 U.S., before any state or tax incentives are applied (and that turns into $36,395 once you apply the maximum $7,5000 Federal tax credit). The ‘Select’ trim Mach-E as configured at that price gets you 230 EPA-rated miles of range, either AWD or RWD (which presumably alters the price) and a 0-60MPH time in the mid 5-second range.

[gallery ids="1912448,1912446,1912445,1912438,1912437"]

Next up is the ‘Premium’ trim at starting at $50,600, again offering an AWD or RWD option, with 300 miles of estimated EPA-rated range, and that same mid 5-second 0-60MPH time. The ‘California Route 1’ model above that comes in only AWD, has that longer 300 miles of EPA range, and promises a mid 6-second 0-60MPH time. It’s a bit slower off the jump, but it’s “named for its cruise-worthy engineering,” so presumably it’s got a more luxe interior for long-distance highway scenic drives.

Next up is a $59,900 ‘First Edition,’ which will be in limited availability and only at launch for the first batch of customers to reserve. It’s got AWD, a range of around 270 miles, a mid 5-second 0-60MPH time and exclusive exterior color options, special scuff plates, brushed aluminum pedals and red brake callipers, as well as contrast-coloured interior stitching. There’s a GT edition at the top end, with an MSRP starting at $60,500, that will manage to get a 0-60MPH time in the mid 3-second range, so that’s clearly the peak performance options for thrill-seekers. Estimated EPA range on that one is around 230 miles.

[gallery ids="1912449,1912442,1912440,1912439,1912444,1912443"]

In terms of looks, the Mustang Mach-E’s design won’t be a surprise to anyone who’s seen the camouflaged spy shots, or the teaser peeks officially released by Ford. It’s definitely got Mustang vibes, and looks a bit like a Mustang that has been lifted up with paneling extended down towards the road. It looks like a panorama roof is an option, and that hatchback will probably please a lot of small SUV fans. There’s also something funky going on with the door handles – the front ones appear very small and near the base of the door windows, while I’m not sure how exactly it works on the rear passenger doors based on these photos.

There’s also a panoramic sunroof at least as an option, and you can see the interior looks pretty blatantly Tesla -inspired, with a large vertical touchscreen taking up most of the center of the dash – albeit with something that looks like a large physical dial right at the base, instead of going for fully touch-only input. A second digital display appears to replace the instrument cluster behind the steering wheel.

Ford has since taken this down, since it’s hosting a splashy event on Saturday with Idris Elba in LA for the full official reveal. TechCrunch will be on site to bring you more photos and details around availability, customization options and more on the day.

15 Nov 2019

Last chance for early-bird pricing on passes to Disrupt Berlin 2019

Trite as it may sound, all good things must come to an end. And the good thing that’s about to come to a grinding halt is early-bird pricing on passes to Disrupt Berlin 2019. You have mere hours to save — the deadline strikes tonight at 11:59 p.m. (CEST).

You can save up to €500, but only if you beat the clock. Buy your early bird pass right now, otherwise you’ll pay more than necessary — how sad.

Need more inspiration than saving significant euros? Okay, let’s talk speakers. Disrupt conferences always offers an awesome lineup of speakers, and this year Disrupt Berlin is no exception. We’re going to mix it up a bit in this post and feature just some of the impressive women who will hold forth on the various Disrupt stages.

Unnatural Language Processing with Emily Foges (CEO at Luminance) and Sofie Quidenus-Wahlforss (founder & CEO at omni:us). Legal contracts and insurance policies can be difficult even for experts to decipher. Hear from the founders how Luminance and omni:us use AI to take on jargon and save everyone time.

The New New Shop with Maria Raga (CEO of Depop). As shopping has moved from the web to apps, Depop has caught the Gen-Z wave. We’ll hear from Raga, the CEO nurturing this “eBay for the 21st Century.”

What does it take to raise a Series A? with Jessica Holzbach (co-founder & CCO at Penta), Louise Dahlborn Samet (partner at Blossom Capital) and Hannah Seal (principal at Index Ventures). Venture capital funds have boomed this decade, but raising money is still hard for young companies. What are investors today looking for in teams, metrics and products?

Up, Up and Away with Jen Rubio (co-founder & chief brand officer at Away). The D2C space is awfully crowded, but luggage brand Away has managed to rise above the noise to build one of the most successful consumer brands of this decade with a valuation of $1.4 billion as of earlier this year. Hear from CEO Jen Rubio about how the company got its start, grew, and became the household name it is today.

Like we said, those are but a few of the amazing women you’ll hear at Disrupt Berlin. And the guys aren’t half bad either. Check out the full agenda here.

There’s more to explore at Disrupt Berlin — Q&A Sessions, the Startup Battlefield, the Hackathon finalists pitching on the Extra Crunch Stage and hundreds of startups in Startup Alley, including our recently announced TC Top Picks.

See and do it all at Disrupt Berlin 2019 on 11-12 December. You’ll see and do it all for less if you act now and buy an early-bird pass to Disrupt Berlin before early-bird pricing disappears tonight at 11:59 p.m. (CEST).

Is your company interested in sponsoring or exhibiting at Disrupt Berlin 2019? Contact our sponsorship sales team by filling out this form.

15 Nov 2019

TikTok tests social commerce

TikTok is beginning to dabble in social commerce. The short-form video app said it has started to allow some users to add links to e-commerce sites (or any other destination) to their profile bio as well as offer creators the ability to easily send their viewers to shopping websites.

The company said the roll-out of these two features are part of its usual “experimentation” to improve app experience for users. Though, this particular experimentation could significantly change how lucrative influencers find TikTok.

A spokesperson of ByteDance, one of the world’s most valuable startups that also owns TikTok, said, “We’re always experimenting with new ways to improve the app experience for our users. Ultimately, we’re focused on ways to inspire creativity, bring joy, and add value for our community.”

These features were first spotted and shared by Fabian Bern, founder of influencer startup Uplab. In a video he tweeted on Thursday, Bern showed how it was possible for the first time for creators to give their viewers the ability to visit a third-party website.

In the video, we also see TikTok is allowing users to put a URL in their profile bio. Instagram has long allowed this functionality, which a large number of accounts use for a variety of reasons. While influencers usually direct their fans to merchandise stores, some news publishers use it to drive people to news articles. The current set of restrictions on Instagram, however, leave a lot to be desired.

If TikTok, which has amassed over a billion users, retains these features it could disrupt what many industry figures call “social commerce.” Social media companies and messaging apps in recent years have lured customers through their core services and introduced shopping features.

In many markets such as China, Southeast Asia and India, which happens to be one of TikTok’s biggest markets, social commerce is increasingly becoming popular and beginning to pose a challenge to “traditional” e-commerce players such as Amazon.

And major giants are beginning to see an opportunity in this space. Facebook, which offers a marketplace, this year backed Meesho, an Indian social commerce startup.

Meesho connects buyers and sellers on WhatsApp and other social media platforms, enables them to showcase and sell their goods, and works with a range of logistics companies to service their orders.

“This is big!” said Nameet Potnis, head of business growth and marketing for the India unit of Naspers’ global payments firm PayU, of TikTok’s new features.

“Excited to see how this is going to reshape commerce in tier 2/3 India where TikTok rules over Instagram. As Indians get comfortable with buying and paying online, local influencers will change the game.”

TikTok’s experimentation comes at a time when rival Instagram is beginning to expand a test in which it hides “likes” from public view. The move has caused concerns for influencers, who count on likes to inform advertisers of their reach.

TikTok, which has amassed over 180 million users in India and thousands of influencers in the country, last month expanded to education category in India.

15 Nov 2019

SoftBank Vision Fund’s Carolina Brochado is coming to Disrupt Berlin

SoftBank’s Vision Fund has single-handedly changed the game when it comes to tech startup investment. And that’s why I’m excited to announce that SoftBank Vision Fund investment director Carolina Brochado is joining us at TechCrunch Disrupt Berlin.

Carolina Brochado isn’t a newcomer when it comes to VC investment. She’s worked for years at Atomico in London. Originally from Brazil, she first joined Atomico as an intern in 2012 while studying her MBA at Columbia Business School.

After her MBA, she joined an e-commerce startup as head of operations. Unfortunately, that startup is now defunct. But she used that opportunity to join Atomico once again, as a principle. She became a partner at Atomico in 2016 and left the firm late last year.

At SoftBank’s Vision Fund, she focuses on fintech, digital health and marketplace startups. Just to give you an idea, some of her past investments with both Atomico and SoftBank include LendInvest, Gympass, Hinge Health, Ontruck and Rekki.

More generally, given the size of SoftBank’s Vision Fund ($100 billion), it has had a huge impact on the growth trajectory of some companies. I’m personally curious to know SoftBank’s approach as board members, whether they get involved in the strategy of those companies or let the executive teams make decisions on their own.

Buy your ticket to Disrupt Berlin to listen to this discussion and many others. The conference will take place on December 11-12.

In addition to panels and fireside chats, like this one, new startups will participate in the Startup Battlefield to compete for the highly coveted Battlefield Cup.


Carolina focuses on fintech, digital health and marketplaces. Prior to joining Softbank, Carolina was a Partner at Atomico, where she sourced and collaborated with portfolio companies for almost five years. Some of her investments included Lendinvest, Gympass, Hinge Health, Ontruck and Rekki.

Previously Carolina has worked as Head of Ops to a now defunct gifting e-commerce start-up, as an investor at Chicago-based private equity firm Madison Dearborn Partners and within Consumer/Retail Investment Banking at Merrill Lynch in New York.

Carolina has a Bachelor of Science degree in Foreign Service from Georgetown University and an MBA from Columbia Business School. She is originally from Brazil.