Tag Archive for China

Marriott Data Breach One Of Biggest Ever

Updated July 17, 2019 – The Brits slapped Marriott with a £99m ($124m) fine for “infringements of the GDPR.” The Information Commissioner’s Office said that Marriott failed to undertake sufficient due diligence when it bought Starwood, and should also have done more to secure its systems prior to the data breach.

___

Marriott Data Breach One Of Biggest EverThe internet is a dangerous place for data. Hotel chain Marriott (MAR) proved that once again. Marriott revealed that hackers stole personal information from 500 million Starwood Preferred Guest program participants. The data stolen in the data breach included sensitive personally identifiable information (PII).

Marriott

Marriott said it got an alert on September 8, 2018, about an attempt to access the Starwood database and enlisted security experts to assess the situation. During the investigation, Marriott claims to have discovered that the unauthorized access to the Starwood network started in 2014.

Investigators found that an unauthorized party had copied and encrypted information from the database and had taken steps toward removing it. The company was able to decrypt the information on November 19, 2018, and found that the contents were from the Starwood guest reservation database. The hotel chain then waited until November 30, 2018, to tell its customers of the data theft.

What was lost on the data breach

personally identifiable informationFor about 327 million Marriott customers, the compromised information includes some combination of name, address, phone number, email address, passport number, Starwood Preferred Guest (‘SPG’) account information, date of birth, gender, arrival and departure information, reservation date, and communication preferences. Marriott added that the data breach included payment card information. About 170 million impacted Marriott customers only had their names and basic information like address or email address stolen.

Marriott says that about 20.3 million encrypted passport numbers and approximately 8.6 million encrypted payment cards were compromised in the breach.

Chinese hackers Several sources report that state-sponsored Chinese hackers working for the intelligence services and the military were behind the attack. The stolen data would be an espionage bonanza for government hackers. Sources point out that the Starwood attacks began in 2014, shortly after the attack on the U.S. government’s Office of Personnel Management (OPM) compromised sensitive data on tens of millions of employees, including application forms for security clearances.

Sadly, the 500 million records Marriott hack only ranks as the third-largest known data breach to date. This list of fails illustrates, no matter what you’re doing online every time you put your information on the internet, you risk it being stolen.

RankCompanyAccounts HackedDate of Hack
1Yahoo3 BillionAugust 2013
2River City Media1.3 BillionMay 2017
3Aadhaar1.1 BillionJanuary 2018
4Marriott500 Million2014 - 2018
5Yahoo500 MillionLate 2014
6Adult Friend Finder412 MiltonOctober 2016
7MySpace360 MillionMay 2016
8Exactis340 MillionJune 2018
9Twitter330 MillionMay 2018
10Experian200 MillionMarch 2012
11Deep Root Analytics198 MillionJune 2017
12Adobe152 MillionOctober 2013
13Under Armor150 MillionFebruary 2018
14Equifax145.5 MillionJuly 2017
15Ebay145 MillionMay 2014
16Heartland Payment Systems134 MillionMay 2008`
17Alteryx123 MillionDecember 2017
18Nametests120 MillionJune 2018
19LinkedIn117 MillionJune 2012
20Target110 MillionNovember 2013
21Quora100 millionNovember 2018
22VK100 MillionDecember 2018
23Firebase100 MillionJune 2018

rb-

There is something else fishy here. Reports claim that the data was encrypted using AES-128 but not all the stolen data. Attackers were able to steal nearly 20 million passport numbers, and 8.6 million encrypted payment cards.

Marriott says that the attackers were able to gain access to 5.25 million unencrypted passport numbers and 2,000 unencrypted payment card numbers.

I’m sure that regulators (GDPR) and lawyers will ask why unencrypted sensitive info like passports and credit card numbers lying around waiting to be stolen?

 

Related articles

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

RIP Yahoo Messenger

Do yRIP Yahoo Messengerou remember Yahoo Messenger? It was popular in the late ’90s and early 2000s when there were only two messengers to communicate with your friends and family. Well … the remnants of Yahoo nee Verizon recently announced the end of Yahoo Messenger. Verizon (VZ)/Yahoo announced that they will disable the Yahoo Messenger service after July 17th, 2018. (rb- yes Yahoo Messenger was still a thing – in the face of Apple‘s (AAPL) FaceTime, Telegram, Snapchat, and Facebook‘s (FB) WhatsApp).

According to the Oath website, YIM had 122.6 million users at its peak. In the FAQ announcing the shutdown, Yahoo said, “We know we have many loyal fans who have used Yahoo Messenger since its beginning  … As the communications landscape continues to change over, we’re focusing on building and introducing new, exciting communications tools that better fit consumer needs.” If you’re looking for a Messenger replacement from Yahoo, they recommend Squirrel, which is in closed beta and by invite only. But why?

YIM leaves a dubious security legacy, as all “free” web products do. In 2007 there were reports that up to 75%  of the users in Yahoo Messenger were SPAMBots. In 2010 all Yahoo systems and customer email accounts were hacked by the Chinese military in “Operation Aurora.” In Operation Aurora the Chinese also attacked Adobe (ADBE)Dow Chemical, Google (GOOG) Juniper Networks (JNPR)Morgan Stanley, Northrop Grumman (NOC)Rackspace (RAX), and Symantec (SYMC).

In 2014 The Guardian reported that The British intelligence agency Government Communications Headquarters (GCHQ)’s secret mass surveillance program Optic Nerve and National Security Agency (NSA) were indiscriminately collecting still images from Yahoo webcam streams from millions of mostly innocent Yahoo webcam users, among other things creating a database for facial recognition for future use. Optic Nerve takes a still image from the webcam stream every 5 minutes. Also in 2014 Yahoo was also hit by a hack that affected around 500 million people.

mass surveillanceIn September 2016, The New York Times reported that Yahoo’s security team, had pressed for Yahoo to adopt end-to-end encryption sometime between 2014 and 2015, but senior leadership resisted, “…because it would have hurt Yahoo’s ability to index and search message data.”

In 2017 Yahoo announced that all of its customer’s accounts were compromised. Allegedly Yahoo did not detect the full extent of the 2013 hack until  4 years later. In 2017, Yahoo announced that all 3 billion accounts were compromised.

YouYahoo can download your chat history for the next 6 months at this download request site. Yahoo will email your chats to you. If you have anything you want to save from Yahoo Messenger, it’s a good idea to get a copy, because users will be unable to sign in to the service after July 17th.

rb-

YIM is not the first long-standing chat app to shut down – AOL Instant Messenger shut down December 15, 2017. But Yahoo Messenger was one of the few old-school messaging services left.

Related article

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedIn, Facebook, and Twitter. Email the Bach Seat here.

PC’s Meh

PC's MehWe are almost midway through 2018 Q2 and the 2018 Q1 PC sales numbers were meh. The good news is that IDC called the PC market flat. That’s good news because they had predicted a 1.5% decrease for the quarter. IDC reports worldwide 60.4 million PC’s sold in the January-to-March period driven mostly by businesses moving to Windows 10. 

PC market experienced a 14th consecutive quarter of declineGartner (IT) is less meh and more blah. Gartner saw slightly more PC’s shipped in 2018 Q1 at 61.7 million units for a 1.4% decline. The PC market experienced a 14th consecutive quarter of decline, dating back to the second quarter of 2012.

Gartner Principal Analyst Ms. Mikako Kitagawa affixed the blame primarily to the Chinese market. “The major contributor to the decline came from China, where unit shipments declined 5.7 percent year over year.” Ms.Kitagawa continued, “This was driven by China’s business market, where some state-owned and large enterprises postponed new purchases or upgrades, awaiting new policies and officials’ reassignments after the session of the National People’s Congress in early March.”

Dell logoThe top three Gartner vendors — DellHP, and Lenovo — accounted for 56.9% of global PC shipments in Q1 of 2018. Up slightly compared with 54.5% of shipments in Q1 of 2017. Dell experienced the strongest growth rate among the top six vendors worldwide, as its shipments increased 6.5%.

HP‘s (HPQ) worldwide PC shipments increased 2.8% in the first quarter of 2018 versus the same period last year. In EMEA, HP Inc. recorded double-digit growth in both desktop and mobile PCs. Gartner says HP Inc. was adversely affected by declining demand in the U.S., which generally accounts for one-third of its total shipments.  

Lenovo’s (LNVGY) global PC shipments remained flat in the first quarter of 2018. Lenovo achieved 6 percent growth in EMEA and double-digit shipment growth in Latin America. However, in Asia/Pacific (its largest market), PC shipments declined 4 percent.

After record holiday sales for consumer and gaming products in the fourth quarter of 2017, Dell continued to do well in the first quarter of 2018. With double-digit shipment increases in EMEA, North America, and Latin America, Dell grew in all regions except Asia/Pacific. Desktop and mobile PCs grew in equal measures, showing Dell’s strength in the business segment according to Gartner.

HP logoIn the U.S., PC shipments totaled 11.8 million units in the first quarter of 2018, a 2.9% decrease from the first quarter of 2017 according to Gartner. Dell moved into the No. 1 position in the U.S. based on shipments, as its market share increased to 29.1%. HP Inc. moved into second place as its shipments declined 4.8%, and its market share totaled 28.4%in the first quarter of 2018.

2018 Q1 - Gartner Global PC Shipments

Company2018 Q1 Shipments2018 Q1 Market Share (%)
Dell3,44029.1
HP Inc.3,36328.4
Lenovo1,63213.8
Apple1,49112.6
Acer Group3212.7
Others1,58613.4
Total11,833100.0
Notes: Data includes desk-based PCs, notebook PCs and ultramobile premiums (such as Microsoft Surface), but not Chromebooks or iPads. All data is estimated based on a preliminary study. Final estimates will be subject to change. The statistics are based on shipments selling into channels. Numbers may not add up to totals shown due to rounding.. Thousands of Units.Source: Gartner (April 2018)

PC shipments in EMEA totaled 18.6 million units in the first quarter of 2018, a 1.7% increase. driven by Enterprise shipments increased as many Windows 10 projects and the fast approach of the compliance deadline for the General Data Protection Regulation (GDPR) in Europe.

PC shipments in Asia/Pacific totaled 21.9 million units in the first quarter of 2018, a 3.9% decline from the first quarter of 2017. As previously mentioned, the PC market in China drove the decline in Asia/Pacific.

IDC says the U.S. market saw a promising opening quarter for the year with almost all major vendors reporting increases in notebook sales. Overall, total PC shipments for 2018 Q1 stood at 13.5 million units.

IDC reports that HP Inc. maintained a comfortable lead over all others in the market with its eighth consecutive quarter of overall growth (up 4.3% year on year) and growth in all regions except Latin America.

Lenovo saw a flat quarter in 2018 Q1, the third consecutive quarter in which the company saw year-on-year volume stabilize with flat global growth and a slower pace of decline in the U.S. Dell Inc. posted the strongest year-on-year growth out of all the major companies, growing 6.4% and buoyed by strong performances in nearly every region.

Acer (TPE:2353) held onto fourth place. Its ongoing expansion into gaming and continued investments in Chromebooks have paid dividends for the company but also caused some tough going in other areas. Apple (AAPL) finished the quarter in fifth place with a year-on-year decline in shipments of 4.8%.

2018 Q1 - IDC Global PC Shipments

Company2018 Q1 Shipments2018 Q1 Market Share (%)
HP Inc.13,67622.6
Lenovo12,30520.4
Dell Inc.10,19016.9
Acer Group4,0856.8
Apple4,0006.6
Others16,12826.7
Total60,383100.0
Preliminary results. Shipments are in thousands of units. Source: IDC Quarterly Personal Computing Device Tracker, April 11, 2018

rb-

PC’s used to be a leading indicator of the health of the tech sector. That is not the case anymore. Economic stress has lengthened the life span of PCs from 3 years to nearly 5 years in many firms and even longer in the home market. Increased smartphones capability and cloud-based applications and storage have taken another bite out of the PC market.

But looking into the tea leaves, many think PCs are on the rebound. Driving the PC market is a demand for premium notebooks in the mainstream and commercial markets. Gaming systems are also part of the equation. IDC expects overall smartphone shipments to decline by 0.2% in 2018 after falling 0.3% last year, the thought is that those dollars would be used to upgrade their PCs.

Mmmm – we’ll see. I say not likely. Can you say “new normal?”

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

China Trying to Kill Bitcoin

Is China Trying to Kill BitcoinCryptocurrency Bitcoin has been on quite a roller-coaster ride the past weeks. From an all time high of $4,950.72 to $3,537.79 during the first 14 days of September 2017 in four days. That is a loss of nearly $1,413.00 which is over 9 shares of Apple (AAPL) or nearly 19 shares of Microsoft (MSFT). Not only am I skeptical about the value of Bitcoin at these levels, but apparently the Chinese government also is skeptical about cryptocurrencies.

CNET reports that the People’s Bank of China, the central bank of China banned initial coin offerings where bitcoin entrepreneurs and speculators raise funds by launching new digital tokens. ICO’s allowed blockchain startups to raise nearly $2 billion from investors worldwide in 2017. There was no mention of cryptocurrencies such as Bitcoin or its rival Ethereum, but the announcement sent stocks sliding anyway.

CNET says PBC ruled that ICOs are a form of “unauthorized and illegal public financing … (which) seriously disrupted economic and financial order” in China. To that end, the country has banned all sales and currency conversions involving digital tokens, and prohibited all financial institutions and non-bank payment organizations from offering any services to ICOs.

Chinese government may be trying to kill BitcoinThe American Banker speculates that the Chinese government may be trying to kill Bitcoin. In a recent article they lay out the case for Chinese regulators putting an end to cybercurrencies.

They point out that the Communist government of China is known for its strict capital controls and sweeping regulatory judgments. This attitude has spilled over to its relationship with cryptocurrencies.

Some observers are quick to point out that China has a long history of using the “Great Firewall of China” to block Western web sites, from Facebook to YouTube to WhatsApp and even VPN’s.

According to AB, the Chinese regulators have instructed all domestic cryptocurrency exchanges to shut down this month, effectively choking off one of the largest markets for the commercial buying and selling of bitcoin and other digital assets.

Further, cryptocurrency exchanges in China must work closely with authorities as they wind down their operations. AB says four major Chinese exchanges—Huobi, ViaBTC, OKCoin and BTC China, at one time the world’s largest by trading volume—have already announced their shutdown.

The moment could be a pivotal one in the evolution of financial services. It could easily be misread both by traditional bankers who could be disrupted and fintech entertainers who see a profit in disrupting the status quo. Bitcoin skeptics such as JPMorgan Chase’s CEO Jamie Dimon who called bitcoin a “fraud” that would soon “blow up.” American Banker believes Mr. Dimon has grown annoyed at the cryptocurrency’s staying power even though his firm is experimenting with blockchain technology—and filed a patent in late 2013 for a bitcoin-style digital payment system.

Next on the chopping block could be bitcoin miners. Bitcoin miners use tremendous amounts of computing power to verify and record transactions on the bitcoin network. In return, they receive new bitcoins which are minted at a predetermined rate. Some 80% of the world’s bitcoin mining takes place in China, the article claims the bottom could fall out of the business if miners have no way to turn their digital gains into fiat currency.

China is doing this “just to show their power,” Oleg Seydak, CEO of the marketplace lender Blackmoon Financial told AB. “They will temporarily close these companies, introduce strong regulations and keep the industry and the sector under their control.”

This approach makes sense if Chinese leaders do not want to be seen as falling behind in a new and growing market. In 2016, China accounted for the majority of global bitcoin trading activity. But with the government clamping down, China’s share has dropped to less than 15% of global volume. Japan now holds the top spot, with the  U.S. and South Korea close behind.

Sasha Ivanov, CEO of Waves, a blockchain platform believes the Chinese ICO ban is a positive development for the industry. Mr. Ivanov told AB that most ICOs were nothing but scams. He says Chinese regulators “finally lost patience, as more and more companies tried to raise millions for nothing.” China, he said, “has a reputation of being a harsh regulator that makes abrupt decisions,” but he feels confident that ICOs will be allowed by Chinese authorities once they have put in place an adequate regulatory framework.

the party's all about control“Fundamentally it all comes back to control, and right now the party’s all about control, especially around the 19th” Communist Party Congress, Bill Bishop, head of The Sinocism China Newsletter told CNBC.

Paul Triolo, practice head, geo-technology, at Eurasia Group, told CNBC, “the cyrptocurrency problem has gotten exponentially more difficult for them to get their head around and regulate.”

“Definitely bitcoin and cryptocurrencies’ free [reign] is over. But the issue of how this will affect the blockchain industry is still unknown,” Mr. Triolo said. “China doesn’t want to be left out of that. They’ll probably still end up allowing some parts of blockchain to survive. The financial piece of bitcoin and the blockchain industry is what they’re after.”

rb-

Seems to me that China wants to reign in cryptocurrencies rather than kill them off. The free-wheeling de-centralized nature of bitcoin makes the centrally controlled Chinese beureartes nervous. However they will probably adapt bitoin to meet their internal needs which is counter to the stated goals of bitcoin.

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers and anything else that catches his attention since 2005. You can follow him at LinkedInFacebook and Twitter. Email the Bach Seat here.

Can Toshiba Stay in Business?

Can Toshiba Stay in Business?Updated 01/31/2024 – On 12/20/2023 Toshiba ends its 74-year history as a listed company. Toshiba’s new owner TBJH Inc., delisted the scandal ridden firm as part of the acquisition agreement (PDF). The deal structure is quite complex and involves a web of subsidiaries. Here’s an explanation from Bing:

  • TBJH Inc. is an indirect subsidiary of Japan Industrial Partners Inc. (JIP).
  • TBJH will be acquired by another JIP subsidiary, an investment fund called TB Investment Limited Partnership (TBLPS), through Brick Lane Partners.
  • TBJH Inc. acquired all of Toshiba Corporation’s shares listed on the Tokyo and Nagoya Stock Exchanges.
  • The shares of Toshiba Corporation were delisted on Dec. 20, 20232.
  • The same amount of money as tender offer price $15 Billion (4,620 JPY per share) is scheduled to be delivered in April.

This structure allowed TBJH to acquire the complete shareholding of Toshiba Corporation and take Toshiba private.

TBLPS is made up of four JIP funds, 17 Japanese businesses, and six Japanese financial institutions. The Related Fund is made up of JIP overseas cooperative funds and overseas funds including those from Japanese institutional investors.

Updated 06/22/2017 – As predicted below, the NYT reports that the Japanese government formed a coalition including the U.S. venture capital firm Bain Capital to buy Toshiba’s microchip division. Estimates are the Toshiba deal is worth approx. $20 Billion.

Toshiba is being driven to sell off its crown jewel, its microchip business, to stabilize the international giant. The New York Times reports that the stalwart of Japan’s postwar rise as a global industrial giant warned that it has doubts over whether it could stay in business. In a filing in Japan, Toshiba said it wrote off more than $6 billion connected to Westinghouse Electric’s troubled nuclear reactor projects in the United States, which had created “substantial uncertainty” over its ability to continue as a going concern.

Toshiba logoThe Toshiba microchip division is the number two global provider of NAND flash memory. NAND flash memory is a type of non-volatile storage technology that does not need power to keep data. Flash memory is electronic (solid-state) non-volatile computer storage medium that can be electrically erased and reprogrammed.

Toshiba originally invented flash memory in the early 1980s from EEPROM (electrically erasable programmable read-only memory). They introduced it to the market in 1984. Called flash memory, after the flash on a camera, the chips have become an essential building block of the modern electronics industry.

Westinghouse logoThe two main types of flash memory are named after the NAND and NOR logic gates. The individual flash memory cells have internal characteristics similar to those of the corresponding gates.

Where EPROMs had to be completely erased before being rewritten, NAND-type flash memory may be written and read in blocks (or pages) that are generally smaller than the entire device. NOR-type flash allows a single machine word (byte) to be written—an erased location—read independently.

The NAND type operates primarily in memory cards, USB flash drives, some solid-state drives, and similar products for general storage and transfer of data. NAND or NOR flash memory is also often used to store configuration data in many digital products, a task previously made possible by EEPROM or battery-powered static RAM. One key disadvantage of flash memory is that it can only endure a relatively small number of write cycles in a specific block.

Makers of flash memory chips

Samsung Electronics Co. (005930) is the biggest maker of flash memory chips, followed by Toshiba, SK Hynix, and U.S.-based Micron Technology (MU). Toshiba manufactures its NAND Flash Memories at its Yokkaichi Operations to maintain quality.

Up to 12 companies have approached Toshiba with proposalsA sale of Toshiba’s chip business, while offering the business a lifeline, would take away its most successful business — and, more broadly, would represent a shift of a major technology away from Japan, depending on the buyer. The Toshiba sale is still in its early stages, and the NYT says as many as 12 companies have approached Toshiba with proposals. Reports are that Toshiba is asking bidders to value its operations at about $17.6 billion (2 trillion yen), and make at least a 50 percent investment.

One of the better-known suitors is Hon Hai Precision Industry, also known as Foxconn. Foxconn is the assembler of Apple (AAPL) iPhones and is the world’s largest contract electronics maker. Foxconn is based in Taiwan but performs most of its manufacturing in mainland China. According to the article, Foxconn could pay billions to buy the business.

Offered $27 billionSources told Japanese public broadcaster NHK the first round of the Toshiba auction drew 10 offers. Toshiba has narrowed the field of bidders for its chip unit to four: U.S. chipmaker Broadcom (AVGO), a private equity firm Silver Lake Partners which reportedly offered $18 billion; SK Hynix; Western Digital (WDC); and Foxconn (2354), reports say Foxconn offered $27 billion.

Apple is considering teaming up with its supplier Foxconn to bid for the Toshiba semiconductor business, Japan’s NHK reported. Apple is considering investing at least several billion dollars to take a stake of more than 20 percent as part of a plan that would have Toshiba keep a partial holding so the business remains under U.S. and Japanese control, NHK reported.

Japanese government may save Toshiba

The authors point out Toshiba’s situation is a remarkable turnabout for Japan, a country that once controlled the majority of microchip markets. In the past Japanese companies have banded together to rescue flailing domestic rivals and not let them fold or be acquired by foreigners.

BankersThe article speculates that the Japanese government may cobble together a “team Japan” offer, but the response from potential participants — who would have to explain the spending to shareholders — has been tepid. “It is fundamentally unthinkable that the Industry Ministry would intervene and take some kind of action,” Hiroshige Seko, the industry minister, said at a news conference, further dampening expectations.

Mark Newman, an analyst at Sanford C. Bernstein, argued in a report that Toshiba’s memory business remained valuable enough that selling it amounted to “selling the crown jewels to pay next month’s rent.”

Apple teaming up with its supplier Foxconn to bid for ToshibaJapanese politicians and industry leaders have voiced concerns over Chinese investors’ buying advanced chip production technology; semiconductors and memory are a major priority of China’s industrial policy. That could hinder any deal with Foxconn, said Mr. Newman, of Sanford C. Bernstein.

The worry is that Foxconn “would build huge fabs in China,” Mr. Bernstein said, referring to semiconductor fabrication plants. “The jobs would move to China from Japan, and furthermore China would go after market share at the expense of crushing industry economics, so the U.S., Taiwan, Korea, Japan all get hurt substantially by this arrangement.” Foxconn has been successful in attracting subsidies from the Chinese government to build large-scale production facilities in China.

The article speculates that Foxconn could take the Toshiba technology and manufacture it more cheaply in China. Such a move could drive down pricing for memory, a boon for Apple and low-cost Chinese smartphone makers. But it would also propel China forward in its long push to become internationally competitive in semiconductors. Mr. Newman has warned that competition in NAND chips could heat up next year, creating the possibility of oversupply and putting more pressure on Toshiba’s ability to put in effect next-generation technologies.

Related articles

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.