Category: UNCATEGORIZED

26 Sep 2019

DoorDash confirms data breach affected 4.9 million customers, workers and merchants

DoorDash has confirmed a data breach.

The food delivery company said in a blog post Thursday that 4.9 million customers, delivery workers and merchants had their information stolen by hackers.

The breach happened on May 4, the company said, but added that customers who joined after April 5, 2018 are not affected by the breach.

It’s not clear why it took almost five months for DoorDash to publicly reveal the breach. A spokesperson for DoorDash did not immediately comment.

Users who joined the platform before April 5, 2018 had their name, email and delivery addresses, order history, phone numbers, and hashed and salted passwords stolen.

The company also said consumers had the last-four digits of their payment cards was also taken, though full numbers and card verification values (CVV) were not taken. Both delivery workers and merchants had the last four-digits of their bank account numbers stolen.

Around 100,000 delivery workers also had their driver’s license information stolen in the breach.

The news comes almost exactly a year after DoorDash customers complained that their accounts had been hacked. The company at the time denied a data breach and claimed attackers were running credential stuffing attacks, in which hackers take lists of stolen usernames and passwords and try them on other sites that use the same passwords. But many of the customers we spoke to said their passwords were unique to DoorDash, ruling out such an attack.

When asked at the time, DoorDash could not explain how the affected accounts were breached.

26 Sep 2019

DoorDash confirms data breach affected 4.9 million customers, workers and merchants

DoorDash has confirmed a data breach.

The food delivery company said in a blog post Thursday that 4.9 million customers, delivery workers and merchants had their information stolen by hackers.

The breach happened on May 4, the company said, but added that customers who joined after April 5, 2018 are not affected by the breach.

It’s not clear why it took almost five months for DoorDash to publicly reveal the breach. A spokesperson for DoorDash did not immediately comment.

Users who joined the platform before April 5, 2018 had their name, email and delivery addresses, order history, phone numbers, and hashed and salted passwords stolen.

The company also said consumers had the last-four digits of their payment cards was also taken, though full numbers and card verification values (CVV) were not taken. Both delivery workers and merchants had the last four-digits of their bank account numbers stolen.

Around 100,000 delivery workers also had their driver’s license information stolen in the breach.

The news comes almost exactly a year after DoorDash customers complained that their accounts had been hacked. The company at the time denied a data breach and claimed attackers were running credential stuffing attacks, in which hackers take lists of stolen usernames and passwords and try them on other sites that use the same passwords. But many of the customers we spoke to said their passwords were unique to DoorDash, ruling out such an attack.

When asked at the time, DoorDash could not explain how the affected accounts were breached.

26 Sep 2019

Facebook tries hiding Like counts to fight envy

If their post has lots of Likes, you feel jealous. If your post doesn’t get enough Likes, you feel embarassed. And when you just chase Likes, you distort your life seeking moments that score them, or censor it fearing you won’t look popular without them.

That’s why Facebook is officially starting to hide Like counts on posts, first in Australia starting tomorrow, September 27th. A post’s author can still see the count, but it’s hidden from everyone else who will only be able to see who but now how many people gave a thumbs-up or other reaction.

Facebook Hides Likes

The launch of the hidden Like counts test makes available what we reported Facebook was privately prototyping earlier this month, as spotted in its Android code by reverse engineering master Jane Manchun Wong. The test will run in parallel to Instagram’s own hidden Like count test we also scooped that first tested in Canada in April before expanding to six more countries in July.

“We are running a limited test where like, reaction, and video view counts are made private across Facebook” a Facebook spokesperson tells me. “We will gather feedback to understand whether this change will improve people’s experiences.” If the test improves people’s sense of well-being without tanking user engagement, it could expand to more countries or even roll out to everyone.

Facebook’s goal here is to make people comfortable expressing themselves. It wants users to focus on the quality of what they share and how it connects them with people they care about, not just the number of people who hit the thumbs-up.

Facebook Like Counts

As you can see, comment counts will still be displayed, as will the most common types of reactions left on a post plus the faces and names of some people who Liked it.

But without a big number on friends’ posts that could make users feel insignificant, or a low number on their own posts announcing their poor reception, users might feel more carefree on Facebook. The removal could also reduce herd mentality, encouraging users to decide for themselves if they enjoyed a post rather than just blindly clicking to concur with everyone else.

As I wrote about 2 years ago, a collection of studies identify the harm Facebook can do. They found that while chatting with friends and comment threads on Facebook made people feel better, passively scrolling and Liking could lead to envy spiraling and declines in perception of well-being. Users would compare their seemingly boring life to the well-Liked glamorous moments shared by friends or celebrities and conclude they were lesser.

One concern is that Facebook Pages that have large followings and often get more Likes than individual users’ posts could miss out on extra engagement and reach without that herd mentality.

But if Facebook wants to build a social network people continue using for another 15 years, it has to put their well-being first — above brands, above engagement, and above ad dollars.

26 Sep 2019

Tesla V10.0 car software update adds Smart Summon, Netflix/YouTube, Spotify, karaoke and more

Tesla is rolling out a new software update that adds a slew of new features to its cars. These include the new ‘Smart Summon’ feature which will allow cars equipped with the optional $5,000 full-self driving package to automatically drive themselves from a parking spot to collect you in a parking spot.

This is one of the most advanced semi self-driving features that Tesla has yet released to the general public, and the company still says you should use it only in lots and when you have a clear view of your car. The company also notes that you’re ultimately responsible for the vehicle, so definitely be aware of what’s going on with the car and its surroundings if you’re planning to use this one – and you can stop the car remotely should you feel the need to. Smart Summon has been out in a limited preview beta for some customers, but now it’s going to be rolling out to all vehicles that have purchased the FSD option

Other new features included in this update include the much-requested native Spotify support, which is available to all Spotify Premium account-holders across all markets where it’s available. That should go a long way towards satisfying Tesla owners who have been less than satisfied with playing audio via Bluetooth from this extremely popular streaming music option. In China, Tesla is also rolling out Ximalaya, a podcast and audiobook streaming service.

Tesla Theater Mode, also new in version 10.0, connects your infotainment system to your Netflix, YouTube and Hulu/Hulu+ (including Live TV if you’re subscribed to that feature) accounts, giving you access to streaming video from all these platforms while the car is safely in park. In China, the automaker is also adding IQiyi and Tencent Video, and it says it’ll be adding more options globally “over time” to supplement these offerings. The new Theater Mode will also provide access to Tesla vehicle tutorials for owners to watch in-car, again only while parked.

A lot of these updates focus on entertainment options, including the new “Car-aoke” mode, which, as you might have guessed, adds an in-car karaoke experience that includes a “massive” library of music and lyrics, Tesla says, with multiple languages supported. Singing along on road-trips has long gotten by with low-tech options only, but official support might encourage more amateur James Cordens.

Last but not least for new entertainment features, there’s the launch of the Cuphead port on Tesla Arcade, the in-car gaming software Tesla launched earlier this year. Cuphead is a cult smash hit indie game, with an iconic art style reminiscent of early Disney animation, and this is definitely a nod to Tesla’s core geek audience (and probably a treat for the Musk man himself). Again, this is only available while parked in case you were worried about distracted driving.

Tesla also added some new navigation features that suggest interesting restaurants and sightseeing opportunities along your way, w which could result in some more interesting spontaneous adventures. There’s also a new file system tweak that separates videos captured by the car’s camera when in Dashcam and Sentry Mode to make it easier for users to find them, and they’ll be auto-deleted when there’s a need to free up storage.

This is a big ol’ update packed with new features, and it’s going to be rolling out over-the-air to vehicles beginning this week. As mentioned a couple of places above, you might see some slight differences region to region but Tesla says you can also check out the updates in-store at its showrooms if you want a sneak preview.

26 Sep 2019

MediaRadar’s new product helps event organizers maximize sales

MediaRadar CEO Todd Krizelman describes his company as having “a very specific objective, which is to help media salespeople sell more advertising” by providing them with crucial data. And with today’s launch of MediaRadar Events, Krizelman hopes to do something similar for event organizers.

These customer groups might actually be one and the same, as plenty of companies (including TechCrunch) see both advertising and events as part of their business. In fact, Krizelman said customer demand “basically pushed us into this business.

He also suggested that that after years of seeing traditional ad dollars shifting into digital, “the money is now moving out of digital into events.”

If you’re organizing a trade show, you can use MediaRadar Events to learn about the overall size of the market, and then see who’s been purchasing sponsorships and exhibitor booths at similar events.

The product doesn’t just tell you who to reach out to, but how much these companies have paid for booths and sponsorships in the past, whether there are seasonal patterns in their conference spending and how that spending fits into their overall marketing budget — after all, Krizelman said, “In 2019, very few companies are siloed by media format as a buyer or a seller. Anyone doing that is putting their business at risk.”

He also described collecting the data needed to power MediaRadar Events as “much more complicated than we expected,” which is why it took the team two years to build the product. He said that data comes from three sources — some of it is posted publicly by event organizers, some of is shared directly by the event organizers with MediaRadar and in some cases members of the MediaRadar team will attend the events themselves.

MediaRadar Events support a wide range of events, although Krizelman acknowledged that it doesn’t have data for every industry. For example, he suggested that a convention for coin-operated laundromat owners might be “too niche” (though he hastened to add that he meant no offense to the laundromat business).

In a statement, James Ogle — chief financial officer at AdExchanger owner Access Intelligence — said:

Hosting events and the resulting revenue that comes from them is a big part of our business. However, the event space is getting more and more crowded and also more niche. Relevancy equals value, so we want to make sure our attendees are within the right target market for our exhibitors. MediaRadar provides critical transparency into the marketplace.

26 Sep 2019

Dating app maker Match sued by FTC for fraud

They’re just not that into you. Or maybe it was a bot? The U.S. Federal Trade Commission on Wednesday announced it has sued Match Group, the owner of just about all the dating apps — including Match, Tinder, OKCupid, Hinge, PlentyofFish, and others — for fraudulent business practices. According to the FTC, Match tricked hundreds of thousands of consumers into buying subscriptions, exposed customers to the risk of fraud, and engaged in other deceptive and unfair practices.

The suit focuses only on Match.com and boils down to this: Match.com didn’t just turn a blind eye to its massive bot and scammer problem, the FTC claims. It knowingly profited from it. And it made deceiving users a core part of its business practices.

The charges against Match are fairly significant.

The FTC says that most consumers aren’t aware that 25 to 30 percent of Match registrations per day come from scammers. This includes romance scams, phishing scams, fraudulent advertising, and extortion scams. During some months from 2013 to 2016, more than half the communications taking place on Match were from accounts the company identified as fraudulent.

Bots and scammers, of course, are a problem all over the web. The difference is that, in Match’s case, it indirectly profited from this, at consumers’ expense, the suit claims.

The dating app sent out marketing emails (i.e., the “You caught his eye” notices) to potential subscribers about new messages in the app’s inbox. However, it did so after it had already flagged the message’s sender as a suspected bot or scammer.

Screen Shot 2019 09 26 at 2.57.37 PM

“We believe that Match.com conned people into paying for subscriptions via messages the company knew were from scammers,” said Andrew Smith, Director of the FTC’s Bureau of Consumer Protection. “Online dating services obviously shouldn’t be using romance scammers as a way to fatten their bottom line.”

From June 2016 to May 2018, Match’s own analysis found 499,691 consumers signed up for subscriptions within 24 hours of receiving an email touting the fraudulent communication, the FTC said. Some of these consumers joined Match only to find the message that brought them there was a scam. Others joined after Match deleted the scammers’ account, following its fraud review process. That left them to find the account that messaged them was now “unavailable.”

In all cases, the victims were now stuck with a subscription — and a hassle when they tried to cancel.

Because of Match’s allegedly “deceptive advertising, billing, and cancellation practices,” consumers would often try to reverse their charges through their bank. Match would then ban the users from the app.

Related to this, Match is also in violation of the “Restore Online Shoppers’ Confidence Act” (ROSCA) by failing to provide a simple way for customers to stop the recurring charges, the FTC says. In 2015, one Match internal document showed how it took over 6 clicks to cancel a subscription, and often led consumers to thinking they canceled when they did not.

Screen Shot 2019 09 26 at 2.59.35 PM

And the suit alleges Match tricked people into free, six-month subscriptions by promising them they wouldn’t have to pay if they didn’t meet someone. It didn’t, however, adequately disclose that there were other, specific steps that had to be taken, involving how they had to use their subscription or redeem their free months.

Screen Shot 2019 09 26 at 2.58.39 PM

Match, naturally, disputes the matter. It claims that it is, in fact, fighting fraud and that it handles 85% of potentially improper accounts in the first four hours, often before they become active. And it handles 96% of those fraudulent accounts within a day.

“For nearly 25 years Match has been focused on helping people find love, and fighting the criminals that try to take advantage of users. We’ve developed industry-leading tools and A.I. that block 96% of bots and fake accounts from our site within a day and are relentless in our pursuit to rid our site of these malicious accounts,” Match stated, in response to the news. “The FTC has misrepresented internal emails and relied on cherry-picked data to make outrageous claims and we intend to vigorously defend ourselves against these claims in court.”

The Match Group, as you may know, loves to have its day in court.

The FTC’s lawsuit isn’t the only one facing Match’s parent company because it doesn’t (allegedly) play fair.

A group of Tinder execs are currently suing Match and its controlling shareholder IAC for manipulating financial data to strip them of their stock options. The suit today continues, even though some plaintiffs had to drop out because Match had snuck an arbitration clause into its employees’ recent compliance acknowledgments.

Now those former plaintiffs are acting as witnesses, and Match is trying to argue that the litigation funding agreement overcompensates them for their testimony in violation of the law. The judge called that motion a “smoke screen” and an attempt to “litigate [the plaintiffs] to death until they settle.”

The Match Group also got into it with Tinder’s rival Bumble, which it failed to acquire twice. It filed a lawsuit over infringed patents, which Bumble said was meant to bring down its valuation. Bumble then filed and later dropped its own $400M suit over Match fraudulently obtaining Bumble’s trade secrets.

In the latest lawsuit, the FTC is asking Match to pay back the “ill-gotten” money and wants to impose civil penalties and other relief. While the financial impacts may not be enough to take down a company with the resources of Match, the headlines from the trial could bring about an increase in negative consumer sentiment over Match and online dating in general. It’s a business that’s become commonplace and normalized in society, but also has a reputation of being a little scammy at times, too. This suit won’t help.

And given that Match Group operates a majority of the U.S.’s top dating apps, that could have a larger, trickle-down effect on its broader business.

The FTC suit is available below.

26 Sep 2019

Apple’s new ‘For All Mankind’ trailer focuses on the people dealing with a Soviet space race win

Apple’s new premium subscription TV service is launching on November 1, and there’s a new trailer for one of its original shows, the Ronald D. Moore project ‘For All Mankind.’

The series is fictional period piece set in the late ’60s/early ’70s, which follows an alternate timeline in which Soviet Russia, not the U.S., is the first to land a man on the Moon. It seems like there will be a lot of fallout as a result of the U.S. losing this key battle in the space race, but the biggest divergence from our actual history might be that the Americans seem to go all-in on an astronaut qualification and training program for women, much earlier than they did in real life.

Watching this, which is more focused on the various cast members than previous trailers for this show (which set up the premise), I get strong The Calculating Stars and the entire ‘Lady Astronaut’ novel series vibes, which are great books by Mary Robinette Kowal if you’re looking for alternative history with a space bent right now, and don’t want to wait for Apple’s $5 per month service to launch.

That said, I’m definitely still very interested in checking this out when it is available, and it doesn’t hurt that it’s from the same creator who brought us the early 2000s Battlestar Galactica reboot and Outlander, my favorite time-traveling British history romp.

26 Sep 2019

Europe shows the way in online privacy

After passively watching for many years as tech giants developed dominant market positions that threaten consumer privacy and stifle competition, American antitrust regulators seem to have finally grasped what’s happening and decided to take action. 

This increasing scrutiny, which tacitly acknowledges that Europe’s more proactive regulators were perhaps right all along, is helping unleash a wave of tech startups at the expense of big tech. By holding industry titans accountable over the privacy and use of our data, regulators are encouraging long overdue disruption of everything from back-end infrastructure to consumer services.

Over the past decade, Facebook, Google, Amazon and others have tightened their grip on their respective domains by buying up hundreds of smaller rivals, with little U.S. government opposition. But as their dominance has grown, and as egregious privacy violations and mishaps proliferate, regulators can no longer look the other way.

In recent months, American regulators have announced a flurry of new antitrust investigations into big technology companies. The Federal Trade Commission has voted to fine Facebook $5 billion for misusing consumer data, the U.S. House Judiciary Committee is probing the tech industry for antitrust violations and 50 attorneys general announced an antitrust probe into Google. U.S. officials are even considering establishing a digital watchdog agency.

It’s hard to understand why it took so long, though perhaps U.S. officials were loath to target domestic companies that were driving huge economic growth and creating millions of new jobs. In contrast, their counterparts across the pond have been on an antitrust tear under the watch of European Union antitrust commissioner (and now also EVP of digital affairs) Margrethe Vestager.

Now that regulators from both Europe and the United States are pursuing antitrust probes, they have exposed areas where startups can innovate. 

Startups take on big tech

26 Sep 2019

Oculus CTO: ‘We missed an opportunity’ with Gear VR

At the Oculus Connect developer conference, one of the company’s veteran executives offered some insights on the end of its best-selling product. “As we move forward into the future with Quest, it is probably time for me to give a bit of a eulogy for Gear VR,” CTO John Carmack told the audience

Carmack detailed that the current software was current but that Samsung’s latest and future phones will not support the headset and its “days were numbered.”

“I do think we missed an opportunity here,” said John Carmack. “I invested a whole lot of effort into it and it’s the foundation that we based all of the mobile things off of.”

The headset was first launched in 2014 with an Innovator Edition that supported the Note 4 and endured a number of editions that made minor adjustments to the size and onboard electronics of the headset. Users could slot their Samsung phones into the headset, which would then launch Oculus’s software and storefront.

Carmack said that the headset line was the company’s best selling by far but that it was also the least retentive of users, trailing Rift, Quest and Go. This isn’t hugely surprising given the friction it took to get into an experience as well as just how many of the headsets were given away for free through bundle deals.

26 Sep 2019

Daily Crunch: Amazon announces new Alexa devices

The Daily Crunch is TechCrunch’s roundup of our biggest and most important stories. If you’d like to get this delivered to your inbox every day at around 9am Pacific, you can subscribe here.

1. Everything Amazon announced at its Alexa event

Amazon held a big shindig yesterday to announce a whole bunch of new hardware ahead of the holidays. Naturally, the lineup includes new Echo smart speakers, as well as Alexa-powered earbuds, glasses, a smart ring and even an oven.

Oh, and Alexa is also getting celebrity voices — starting with Samuel L. Jackson, whose smooth tones you can purchase for just 99 cents.

2. Facebook announces Horizon, a VR massive-multiplayer world

Facebook Horizon is a virtual reality sandbox universe where you can build your own environments and games, play and socialize with friends or just explore the user-generated landscapes. Basically, it’s Facebook’s take on Second Life, and it’s launching in private beta next year.

3. Verizon lights up 5G in (parts of) NYC

Manhattan and downtown Brooklyn are the carrier’s first focus in New York City, bringing the total number of cities with Verizon 5G to 13. (Obligatory reminder: Verizon owns TechCrunch.)

4. Summer wants to vanquish student loans for borrowers, and now has $10M to do it

Through Summer’s platform, borrowers can get a full 360-degree view of their current student loan situation, and begin exploring options for how to repay it in the most financially efficient way possible.

5. Nigeria’s CcHub acquires Kenya’s iHub to create mega Africa incubator

Two of Africa’s powerhouse tech incubators will join forces: Nigerian innovation center and seed-fund CcHub has acquired Nairobi-based iHub.

6. Founders, get to Disrupt SF for answers to the really hard questions

Yes, it’ll be fun to see all the celebrities (Will Smith! Steph Curry!) at Disrupt SF, but be sure to check out the agenda for the Extra Crunch stage, where we’ll get more in-depth about the challenges that every founder faces.

7. How Amazon is closing out competitors by opening up voice

More Amazon news: The company announced the formation of a new consortium called the Voice Interoperability Group, which aims to create a set of standards and technology for voice-enabled hardware, with users able to trigger one voice over another with the right set of “wake words.” (Extra Crunch membership required.)