Archive for October 30, 2017

Are You a Human

Are You a HumanDetroit-based Are You a Human was recently purchased by Virginia-based Distil Networks. The purchase is part of Distil’s efforts to expand its bot-detection capabilities. As part of the acquisition, the Human Tag will be re-branded as Distil Bot Discovery. Distil will open an office in Detroit and increase its presence in Motown. All 10 of Are You A Human’s employees are staying on, according to reports.

The firm’s website describes the Are You Human technology;

[Are You Human] collects hundreds of fingerprinting metrics and analyzes user’s device, software, and natural behavior to develop robust behavioral metrics on each page view in real-time … Only through an expert understanding of natural human characteristics and behavior is it possible to identify the 99% of non-human traffic caused by new and unique bots that fraud detection and verification systems can’t find

suite of bot-detection productsDistill Networks will add A You a Human’s real-time analysis technology and biometric information to its own suite of bot-detection products and use it to launch a free bot-discovery plugin for Google Analytics. Detecting bots is important because they can inflate website traffic numbers or present a security risk by searching for sensitive information.

The firm cited the Motor City as being:

… incredibly helpful and supportive to us, and we can’t imagine doing this anywhere else. Being able to build this company in Detroit has been hugely meaningful to all of us, and we’ll still be part of that awesome community going forward.

Detroit skyline

 

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Biometrics Hype

Biometrics HypeFollowers of the Bach Seat know biometrics have a limited value in replacing passwords. Despite the technical flaws another round of biometric hype is rolling across the Intertubes. The latest round of biometric hype is coming from Samsung (005930). In the hope to revive their brand, Samsung has released the Galaxy S8. The Samsung Galaxy S8 includes the ability to use facial recognition software to unlock your brand new phone. CNet says that this idea “sounds awesome.”

However, this awesome idea appears to lower the bar for your security. CNet reports that the video blogger MarcianoTech demonstrated a pre-release version of the Galaxy S8 being unlocked using just a photo (at the 1:09 mark). To their credit, Samsung has acknowledged that the Face Unlock feature is more for convenience than for security. The biometric feature cannot be used for mobile payments. While weak facial recognition software may be a convenience for the user, it could also be very convent for others, too.

The troubles with Face Unlock date back to 2011.  In 2011 SlashGear reported that Google (GOOG) admitted the security system could be fooled by a picture of you and not the real thing. CNet reports that the technology was developed by PittPatt, a startup originating from Carnegie Mellon University, which was later acquired by Google.

FBI’s facial recognition database

Next Generation Identification databaseThe Guardian reports during testimony before congress the FBI admitted that about half of adult Americans’ photographs are stored in facial recognition databases that can be accessed by the FBI. About 80% of photos in the FBI’s network are non-criminal entries, including pictures from driver’s licenses and passports from 18 states including Michigan.

The FBI first launched its advanced biometric database, Next Generation Identification (NGI), in 2010. NGI augmented the old fingerprint database with further capabilities including facial recognition. The bureau did not tell the public about its newfound capabilities nor did it publish a privacy impact assessment, required by law, for five years.

Unlike with the gathering of fingerprints and DNA, which is done following an arrest, photos of innocent civilians are being collected proactively. The FBI made arrangements with 18 different states to gain access to their databases of driver’s license photos.

 

“I’m frankly appalled,” said Paul Mitchell, a congressman for Michigan. “I wasn’t informed when my driver’s license was renewed my photograph was going to be in a repository that could be searched by law enforcement across the country.

rb-

So anyone with a photo of you, or maybe even just access to your Facebook (FB) photos, could potentially access your phone. There are two important reasons why biometrics won’t work, and why the old-fashioned password is still a better option: a person’s biometrics can’t be kept secret and they can’t be revoked.

 

no real way to hide biometric data from the worldPeople expose their biometrics everywhere – they leave fingerprints behind at bars and restaurants, their faces and eyes are captured in photos and film, etc. There’s no real way to hide this data from the world. As far back as 2002, research led by Japanese cryptographer Tsutomu Matsumoto. Matsumoto and his team gummy bears to make artificial fingers that they then used to fool fingerprint scanners. The gelatin-based finger was successful in fooling all 11 devices tested. I wrote about spoofing fingerprints in 2016.

However, it’s the second problem with biometrics that is the really big one: once a person’s biometrics have been compromised, they will always be compromised. Since a person can’t change their fingerprint or whatever biometric is being relied upon, it’s ‘once owned, forever owned.’ That is biometrics’ major failing and the one that will be hardest to overcome.

Part of the reason is that it’s silly to only have 10 possible passwords your whole life (20, if you count toes) but unlike a password, once a biometric is compromised, it is permanent. Today, if your Twitter account gets hacked, you just change the password – but if you are using a biometric, you will be stuck with that hacked password for the rest of your life.

With the release of Windows 10, Microsoft stepped up its biometrics game. CNet reports that with the recent improvements in Windows 10 biometric security includes facial recognition software. Besides facial recognition, Windows Hello also supports other biometric factors to secure your PC. Some of the factors are fingerprints and iris recognition. For facial recognition though, Microsoft (MSFT) has partnered with chipmaker Intel (INTC) for its RealSense 3D camera tech to get the job done. RealSense uses depth-sensing infrared cameras to track the location and positions of objects. Microsoft uses RealSense to scan a person’s face or iris before unlocking the device in question.

To further push the biometrics agenda, more than 200 companies including Microsoft, Lenovo, Alibaba, and MasterCard have already come together to form a partnership known as the FIDO (Fast Identity Online) Alliance. FIDO was founded in 2013 to address issues such as a worldwide adoption of standards for authentication processes over the Web to help reduce reliance on passwords.

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

60 Seconds Online

60 Seconds OnlineThe global internet economy is huge, really huge, and growing. Online provider of market and consumer data, Statista says that retail e-commerce sales worldwide will top 4 Trillion dollars in 2020. Right now the worldwide internet economy takes in an incredible $3.9 million every 60 seconds.

  • Amazon (AMZN) rakes in $204,000 every minute,
  • Ebay (EBAY) rings up $160,000 in sixty seconds, and
  • Cyber-criminals steal over $1000 of other people’s cash each second.

This infographic from E-Commerce fulfillment firm RedStag Fulfillment details what happens in 60 seconds of online e-commerce.RedStag Fulfillment infographic

Related articles

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Is Toshiba Screwed?

Is Toshiba Screwed?The tortuous auction of  the covted Toshiba NAND chip fab has finally wrapped. You would think that after over nine months of bidding and 2 trillion yen ($17.7 billion) the victors would like to gloat. A win of that size would be celebrated, but nooo….

The winning partners lead by venture capitalist Bain Capital and Apple can’t even agree on when to hold a presser to announce their purchase. The consortium had planned a presser for 09-28-2017, which was abruptly canceled just minutes before it was due to begin according to reports. Reuters reports that “…the consortium could not form a consensus on whether to brief media.”

PangeaOne wrinkle may be that Apple (AAPL) has demanded new terms on its chip supply for the new iPhones. In addition to Apple, Bain’s consortium “Pangea” includes Japan’s Hoya Corporation, South Korea’s SK Hynix, and U.S. investors Kingston TechnologySeagate Technology (STX), and Dell Technologies Capital.- all of which want access to NAND technology.

Under the deal, Toshiba will have 40.2 percent of voting rights in the chip unit and Hoya will own 9.9 percent. The four U.S. tech firms will not have voting rights.

Besides internal strife, the sale also faces legal challenges from Western Digital (WDC), Toshiba’s chip venture partner, and rejected suitor, which is seeking an injunction to block any deal that does not have its consent.

Western Digital logoWestern Digital, one of the world’s leading makers of hard disk drives, paid some $16 billion last year to acquire SanDisk, Toshiba’s chip joint venture partner since 2000. It sees chips as a key pillar of growth and is desperate to keep the business out of the hands of rival chipmakers.

Bain has also announced that it plans to take Pangea public by 2020.

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

China Trying to Kill Bitcoin

Is China Trying to Kill BitcoinCryptocurrency Bitcoin has been on quite a roller-coaster ride the past weeks. From an all time high of $4,950.72 to $3,537.79 during the first 14 days of September 2017 in four days. That is a loss of nearly $1,413.00 which is over 9 shares of Apple (AAPL) or nearly 19 shares of Microsoft (MSFT). Not only am I skeptical about the value of Bitcoin at these levels, but apparently the Chinese government also is skeptical about cryptocurrencies.

CNET reports that the People’s Bank of China, the central bank of China banned initial coin offerings where bitcoin entrepreneurs and speculators raise funds by launching new digital tokens. ICO’s allowed blockchain startups to raise nearly $2 billion from investors worldwide in 2017. There was no mention of cryptocurrencies such as Bitcoin or its rival Ethereum, but the announcement sent stocks sliding anyway.

CNET says PBC ruled that ICOs are a form of “unauthorized and illegal public financing … (which) seriously disrupted economic and financial order” in China. To that end, the country has banned all sales and currency conversions involving digital tokens, and prohibited all financial institutions and non-bank payment organizations from offering any services to ICOs.

Chinese government may be trying to kill BitcoinThe American Banker speculates that the Chinese government may be trying to kill Bitcoin. In a recent article they lay out the case for Chinese regulators putting an end to cybercurrencies.

They point out that the Communist government of China is known for its strict capital controls and sweeping regulatory judgments. This attitude has spilled over to its relationship with cryptocurrencies.

Some observers are quick to point out that China has a long history of using the “Great Firewall of China” to block Western web sites, from Facebook to YouTube to WhatsApp and even VPN’s.

According to AB, the Chinese regulators have instructed all domestic cryptocurrency exchanges to shut down this month, effectively choking off one of the largest markets for the commercial buying and selling of bitcoin and other digital assets.

Further, cryptocurrency exchanges in China must work closely with authorities as they wind down their operations. AB says four major Chinese exchanges—Huobi, ViaBTC, OKCoin and BTC China, at one time the world’s largest by trading volume—have already announced their shutdown.

The moment could be a pivotal one in the evolution of financial services. It could easily be misread both by traditional bankers who could be disrupted and fintech entertainers who see a profit in disrupting the status quo. Bitcoin skeptics such as JPMorgan Chase’s CEO Jamie Dimon who called bitcoin a “fraud” that would soon “blow up.” American Banker believes Mr. Dimon has grown annoyed at the cryptocurrency’s staying power even though his firm is experimenting with blockchain technology—and filed a patent in late 2013 for a bitcoin-style digital payment system.

Next on the chopping block could be bitcoin miners. Bitcoin miners use tremendous amounts of computing power to verify and record transactions on the bitcoin network. In return, they receive new bitcoins which are minted at a predetermined rate. Some 80% of the world’s bitcoin mining takes place in China, the article claims the bottom could fall out of the business if miners have no way to turn their digital gains into fiat currency.

China is doing this “just to show their power,” Oleg Seydak, CEO of the marketplace lender Blackmoon Financial told AB. “They will temporarily close these companies, introduce strong regulations and keep the industry and the sector under their control.”

This approach makes sense if Chinese leaders do not want to be seen as falling behind in a new and growing market. In 2016, China accounted for the majority of global bitcoin trading activity. But with the government clamping down, China’s share has dropped to less than 15% of global volume. Japan now holds the top spot, with the  U.S. and South Korea close behind.

Sasha Ivanov, CEO of Waves, a blockchain platform believes the Chinese ICO ban is a positive development for the industry. Mr. Ivanov told AB that most ICOs were nothing but scams. He says Chinese regulators “finally lost patience, as more and more companies tried to raise millions for nothing.” China, he said, “has a reputation of being a harsh regulator that makes abrupt decisions,” but he feels confident that ICOs will be allowed by Chinese authorities once they have put in place an adequate regulatory framework.

the party's all about control“Fundamentally it all comes back to control, and right now the party’s all about control, especially around the 19th” Communist Party Congress, Bill Bishop, head of The Sinocism China Newsletter told CNBC.

Paul Triolo, practice head, geo-technology, at Eurasia Group, told CNBC, “the cyrptocurrency problem has gotten exponentially more difficult for them to get their head around and regulate.”

“Definitely bitcoin and cryptocurrencies’ free [reign] is over. But the issue of how this will affect the blockchain industry is still unknown,” Mr. Triolo said. “China doesn’t want to be left out of that. They’ll probably still end up allowing some parts of blockchain to survive. The financial piece of bitcoin and the blockchain industry is what they’re after.”

rb-

Seems to me that China wants to reign in cryptocurrencies rather than kill them off. The free-wheeling de-centralized nature of bitcoin makes the centrally controlled Chinese beureartes nervous. However they will probably adapt bitoin to meet their internal needs which is counter to the stated goals of bitcoin.

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers and anything else that catches his attention since 2005. You can follow him at LinkedInFacebook and Twitter. Email the Bach Seat here.