1010Computers | Computer Repair & IT Support

Facebook mistakenly leaked developer analytics reports to testers

Set the “days without a Facebook privacy problem” counter to zero. This week, an alarmed developer contacted TechCrunch, informing us that their Facebook App Analytics weekly summary email had been delivered to someone outside their company. It contains sensitive business information, including weekly average users, page views and new users.

Forty-three hours after we contacted Facebook about the issue, the social network now confirms to TechCrunch that 3 percent of apps using Facebook Analytics had their weekly summary reports sent to their app’s testers, instead of only the app’s developers, admins and analysts.

Testers are often people outside of a developer’s company. If the leaked info got to an app’s competitors, it could provide them an advantage. At least they weren’t allowed to click through to view more extensive historical analytics data on Facebook’s site.

Facebook tells us it has fixed the problem and no personally identifiable information or contact info was improperly disclosed. It plans to notify all impacted developers about the leak today and has already begun.

TechCrunch was provided with this statement from a Facebook spokesperson:

“Due to an error in our email delivery system, weekly business performance summaries we send to developers about their account were also sent to a small group of those developer’s app testers. No personal information about people on Facebook was shared. We’re sorry for the error and have updated our system to prevent it from happening again.”

Below you can find the email the company is sending:

Subject line: We recently resolved an error with your weekly summary email

We wanted to let you know about a recent error where a summary e-mail from Facebook Analytics about your app was sent to testers of your app ‘[APP NAME WILL BE DYNAMICALLY INSERTED HERE]’. As you know, we send weekly summary emails to keep you up to date with some of your top-level metrics — these emails go to people you’ve identified as Admins, Analysts and Developers. You can also add Testers to your account, people designated by you to help test your apps when they’re in development.

We mistakenly sent the last weekly email summary to your Testers, in addition to the usual group of Admins, Analysts and Developers who get updates. Testers were only able to see the high-level summary information in the email, and were not able to access any other account information; if they clicked “View Dashboard” they did not have access to any of your Facebook Analytics information.

We apologize for the error and have made updates to prevent this from happening again.

One affected developer told TechCrunch “Not sure why it would ever be appropriate to send business metrics to an app user. When I created my app (in beta) I added dozens of people as testers as it only meant they could login to the app…not access info!” They’re still waiting for the disclosure from Facebook.

Facebook wouldn’t disclose a ballpark number of apps impacted by the error. Last year it announced 1 million apps, sites and bots were on Facebook Analytics. However, this issue only affected apps, and only 3 percent of them.

The mistake comes just weeks after a bug caused 14 million users’ Facebook status update composers to change their default privacy setting to public. And Facebook has had problems with misdelivering business information before. In 2014, Facebook accidentally sent advertisers receipts for other business’ ad campaigns, causing significant confusion. The company has also misreported metrics about Page reach and more on several occasions. Though user data didn’t leak and today’s issue isn’t as severe as others Facebook has dealt with, developers still consider their business metrics to be private, making this a breach of that privacy.

While Facebook has been working diligently to patch app platform privacy holes since the Cambridge Analytica scandal, removing access to many APIs and strengthening human reviews of apps, issues like today’s make it hard to believe Facebook has a proper handle on the data of its 2 billion users.

Powered by WPeMatico

WordPress.com parent company acquires Atavist

Automattic, the company behind WordPress.com, WooCommerce, Longreads, Simplenote and a few other things, is acquiring Brooklyn-based startup Atavist.

Atavist has been working on a content management system for independent bloggers and writers. With an Atavist website, you can easily write and publish stories with a ton of media.

You might think that this isn’t particularly groundbreaking as anyone can create a website on WordPress.com or Squarespace and do the same thing. But the company also lets you create a paywall and build a subscription base.

Many writers don’t want to deal with the technical details of running a website. That’s why Atavist gives you the tools so that you can focus on your stories.

Atavist is also running a publication called Atavist Magazine. The publication is also joining Automattic. It’s unclear if it’s going to be part of Longreads or remain its own thing.

The CMS itself won’t stick around. Automattic said that the publishing platform will be integrated into WordPress. And this is the interesting part.

While WordPress is probably a much more solid CMS than Atavist, it could mean that Automattic wants to start offering subscriptions and paywalls. You can imagine WordPress.com websites that offer monthly subscriptions natively.

30 percent of the web runs on WordPress. Many of them are open source instances of WordPress hosted on their own servers. But many websites are hosted by WordPress.com, including TechCrunch.

Subscriptions on WordPress.com is good news for the web. Medium abruptly canceled its subscription program leaving many independent publications in the dust. So it’s hard to trust Medium when it comes to providing enough revenue to independent writers.

Automattic could create a seamless portal to manage subscriptions to multiple publications. And this could lead to less advertising and better content.

Powered by WPeMatico

Lime scooters are live in Paris

Lime is the hot new thing in San Francisco, but will it work in other countries? The company just launched its electric scooter service in Paris.

This isn’t the first European city as Lime is also operating in Berlin, Bremen, Frankfurt and Zurich. But it’s a significant launch as alternative mobility solutions have all been trying to grab some market share in Paris.

Yesterday, you could see 200 scooters in the South East of Paris ready to be deployed. Lime plans to expand its fleet over time. Every day, the company will collect all the scooters at 9 PM to recharge them and put them back on the streets at 5 AM.

Between October and January, four bike-sharing services launched in Paris — GoBee Bike, Obike, Ofo and Mobike. GoBee Bike has left the market since then because it was underfunded and suffering from too much competition.

But Mobike and Ofo seem to be doing really well, especially if you compare it to the docked bikes — Vélib is more or less broken right now. Vélib started in 2007, years before cities like New York and London adopted a bike-sharing system. That’s why Parisians have had enough time to get familiar with the idea of sharing a bike with other members.

And then, there is Cityscoot and Coup, two electric scooter services (motorcycles, not standing scooters). They’re more expensive but quite popular, especially for longer distances.

It leaves Lime in an awkward position. I tried a Lime earlier today and wasn’t convinced it was the right solution for Paris. First, it’s quite expensive. You pay €1 to unlock it and then €0.15 per minute. A 20-minute ride costs €4 for instance. This is more expensive than 20 minutes on a Cityscoot, and less expensive than 20 minutes using Coup.

But it’s way more expensive than 20 minutes on an Ofo bike, which costs €0.50. I’m not convinced people are willing to pay eight times as much for everyday rides. Public transport options are also much more efficient in Paris than in San Francisco.

Paris is also much more difficult to navigate on a Lime scooter than San Francisco. There are speed bumps made out of paving stones and narrow streets. In addition to that, you can’t brake abruptly because you’re just standing on a scooter. I had to brake constantly in order to overcome those obstacles.

And yet, cities will need many different options to replace cars. There won’t be just one thing. People will use a multitude of transportation methods, from bikes to Lime scooters to electric motorcycle scooters. Now let’s see if Lime scooters won’t end up in the Seine.

Powered by WPeMatico

Sphero acquires a music education startup

It’s hard to say precisely how Sphero’s pivot to education is going in these early stages, but it recently got an infusion of funding and is already out acquiring new startups. The BB-8 maker announced this morning that it’s picked up Specdrums​ — the fellow Boulder, Co-based startup is a Kickstarter success story that lets users create music with an app connected ring.

It’s a strange fit at first glance, but Sphero clearly sees the company’s wearable technology as a strong addition to its newfound STEAM education focus.

“We firmly believe that play is a powerful teacher. With the addition of Specdrums, we are strengthening the ‘A’ in STEAM in our product roadmap,” Sphero CEO Paul Berberian said in a press release tied to the news. “With Sphero’s infrastructure and the groundwork that the Specdrums founders have already completed, we believe there’s a huge opportunity to continue to inspire curiosity in classrooms and beyond.”

We’re stoked to announce the addition of Specdrums, app-enabled musical rings that turn colors into sounds, to the Sphero family.

Get more details below, and be the first to know when Specdrums become available for purchase so you can stop beatboxing. https://t.co/P5xdpX583c pic.twitter.com/fbH5WcggnA

— Sphero (@Sphero) June 22, 2018

How Specdrums will fit into the larger company remains to be seen, but for now, Sphero is promising a relaunch of the company’s first music product the end of this year or the beginning of next. The initial Spedrums offering had been sold out after the closing of the company’s 2017 crowdfunding campaign.

Sphero, for its part, kicked off the year on rough footing, laying off dozens of staffers after the company’s glut of Disney-branded robotics toys failed to maintain its earlier Star Wars success. At the time, the company promised to double down on education, and is looking to fulfill that goal with a recent $12 million funding round.

Terms for this particular acquisition, however, have not been disclosed.

Powered by WPeMatico

Facebook prototypes tool to show how many minutes you spend on it

Are you ready for some scary numbers? After months of Mark Zuckerberg talking about how “Protecting our community is more important than maximizing our profits,” Facebook is preparing to turn that commitment into a Time Well Spent product.

Buried in Facebook’s Android app is an unreleased “Your Time on Facebook” feature. It shows the tally of how much time you spent on the Facebook app on your phone on each of the last seven days, and your average time spent per day. It lets you set a daily reminder that alerts you when you’ve reached your self-imposed limit, plus a shortcut to change your Facebook notification settings.

Facebook confirmed the feature development to TechCrunch, with a spokesperson telling us, “We’re always working on new ways to help make sure people’s time on Facebook is time well spent.”

The feature could help Facebook users stay mindful of how long they’re staring at the social network. This self-policing could be important since both iOS and Android are launching their own screen time monitoring dashboards that reveal which apps are dominating your attention and can alert you or lock you out of apps when you hit your time limit. When Apple demoed the feature at WWDC, it used Facebook as an example of an app you might use too much.

Images of Facebook’s digital wellbeing tool come courtesy of our favorite tipster and app investigator Jane Manchun Wong. She previously helped TechCrunch scoop the development of features like Facebook Avatars, Twitter encrypted DMs and Instagram Usage Insights — a Time Well Spent feature that looks very similar to this one on Facebook.

Our report on Instagram Usage Insights led the sub-company’s CEO Kevin Systrom to confirm the upcoming feature, saying “It’s true . . . We’re building tools that will help the IG community know more about the time they spend on Instagram – any time should be positive and intentional . . . Understanding how time online impacts people is important, and it’s the responsibility of all companies to be honest about this. We want to be part of the solution. I take that responsibility seriously.”

Facebook has already made changes to its News Feed algorithm designed to reduce the presence of low-quality but eye-catching viral videos. That led to Facebook’s first-ever usage decline in North America in Q4 2017, with a loss of 700,000 daily active users in the region. Zuckerberg said on an earnings call that this change “reduced time spent on Facebook by roughly 50 million hours every day.”

Zuckerberg has been adamant that all time spent on Facebook isn’t bad. Instead, as we argued in our piece “The difference between good and bad Facebooking,” its asocial, zombie-like passive browsing and video watching that’s harmful to people’s wellbeing, while active sharing, commenting and chatting can make users feel more connected and supported.

But that distinction isn’t visible in this prototype of the “Your Time on Facebook” tool, which appears to treat all time spent the same. If Facebook was able to measure our active versus passive time on its app and impress the health difference, it could start to encourage us to either put down the app or use it to communicate directly with friends when we find ourselves mindlessly scrolling the feed or enviously viewing people’s photos.

Powered by WPeMatico

Citymapper lets you find Ofo, Mobike and scooters around you

Urban transportation app Citymapper quietly rolled out an app update that lets you find many alternative mobility services in the app. You can now find the nearest dockless bike or electric scooter around you (not the Bird and Lime kind, the motorcycle kind).

The integrations are already live in many cities. The company didn’t add new buttons for each service because it was already getting quite crowded with buses, subways and ride-sharing services.

If you tap the bike button, you get a map view of the streets around you. In addition to traditional bike-sharing services, you’ll now find colored dots representing both Ofo and Mobike . Below the map, you get a list of the closest bikes. TechCrunch’s Ingrid Lunden previously reported that the Mobike integration was coming soon.

But Citymapper also added a new scooter button in multiple cities. As the name suggests, this button helps you locate the closest free-floating scooter that you can unlock with your phone.

In Paris, you’ll find Coup and Cityscoot scooters. In Berlin, you’ll find Coup scooters. In Madrid and Barcelona, you’ll find Muving, ioscoot, eCooltra and Yugo scooters… You get the idea. Chances are all your local options will be there.

Interestingly, electric scooters from Bird and Lime aren’t in there just yet. It might be what everybody is talking about, but you’ll only see Jump and Ford bikes in San Francisco.

For now, all you can do is locate the nearest bike or scooter. You still have to open each individual app to scan the QR code and unlock those vehicles.

But this is an interesting approach. Citymapper doesn’t operate any transportation service. It can be an agnostic player and provide a comprehensive view of what’s around you without any conflict of interest. It doesn’t have to recreate a transportation hub like Lyft or Uber as those two companies recently acquired Motivate and Jump to provide bike-sharing services.

And if you’re visiting a city for the first time, you can open the app to find out how you’ll be able to navigate that new city.

Powered by WPeMatico

Security, privacy experts weigh in on the ICE doxxing

In what appears to be the latest salvo in a new, wired form of protest, developer Sam Lavigne posted code that scrapes LinkedIn to find Immigration and Customs Enforcement employee accounts. His code, which basically a Python-based tool that scans LinkedIn for keywords, is gone from Github and Gitlab and Medium took down his original post. The CSV of the data is still available here and here and WikiLeaks has posted a mirror.

“I find it helpful to remember that as much as internet companies use data to spy on and exploit their users, we can at times reverse the story, and leverage those very same online platforms as a means to investigate or even undermine entrenched power structures. It’s a strange side effect of our reliance on private companies and semi-public platforms to mediate nearly all aspects of our lives. We don’t necessarily need to wait for the next Snowden-style revelation to scrutinize the powerful — so much is already hiding in plain sight,” said Lavigne.

Doxxing is the process of using publicly available information to target someone online for abuse. Because we can now find out anything on anyone for a few dollars – a search for “background check” brings up dozens of paid services that can get you names and addresses in a second – scraping public data on LinkedIn seems far easier and innocuous. That doesn’t make it legal.

“Recent efforts to outlaw doxxing at the national level (like the Online Safety Modernization Act of 2017) have stalled in committee, so it’s not strictly illegal,” said James Slaby, Security Expert at Acronis. “But LinkedIn and other social networks usually consider it a violation of their terms of service to scrape their data for personal use. The question of fairness is trickier: doxxing is often justified as a rare tool that the powerless can use against the powerful to call attention to perceived injustices.”

“The problem is that doxxing is a crude tool. The torrent of online ridicule, abuse and threats that can be heaped on doxxed targets by their political or ideological opponents can also rain down on unintended and undeserving targets: family members, friends, people with similar names or appearances,” he said.

The tool itself isn’t to blame. No one would fault a job seeker or salesperson who scraped LinkedIn for targeted employees of a specific company. That said, scraping and publicly shaming employees walks a thin line.

“In my opinion, the professor who developed this scraper tool isn’t breaking the law, as it’s perfectly legal to search the web for publicly available information,” said David Kennedy, CEO of TrustedSec. “This is known in the security space as ‘open source intelligence’ collection, and scrapers are just one way to do it. That said, it is concerning to see ICE agents doxxed in this way. I understand emotions are running high on both sides of this debate, but we don’t want to increase the physical security risks to our law enforcement officers.”

“The decision by Twitter, Github and Medium to block the dissemination of this information and tracking tool makes sense – in fact, law enforcement agents’ personal information is often protected. This isn’t going to go away anytime soon, it’s only going to become more aggressive, particularly as more people grow comfortable with using the darknet and the many available hacking tools for sale in these underground forums. Law enforcement agents need to take note of this, and be much more careful about what (and how often) they post online.”

Ultimately, doxxing is problematic. Because we place our information on public forums there should be nothing to stop anyone from finding and posting it. However, the expectation that people will use our information for good and not evil is swiftly eroding. Today, wrote one security researcher, David Kavanaugh, doxxing is becoming dangerous.

“Going after the people on the ground is like shooting the messenger. Decisions are made by leadership and those are the people we should be going after. Doxxing is akin to a personal attack. Change policy, don’t ruin more lives,” he said.

Powered by WPeMatico

Twitter buys a startup to battle harassment, e-cigs are booming, and a meditation app is worth $250M

Hello and welcome back to Equity, TechCrunch’s venture capital-focused podcast where we unpack the numbers behind the headlines. This week TechCrunch’s Silicon Valley Editor Connie Loizos and I jammed out on a couple of topics as Alex Wilhelm was out managing his fake stock game spreadsheets or something. (The jury is out on whether this was a good or bad thing.)

First up is Twitter buying Smyte, a startup targeting fixes for spam and abuse. This is, of course, Twitter’s perennial problem and it’s one that it’s been trying to fix for some time — but definitely not there yet. The deal terms weren’t disclosed, but Twitter to its credit has seen its stock basically double this year (and almost triple in the past few years). Twitter is going into a big year, with the U.S. midterm elections, the 2018 World Cup, and the Sacramento Kings probably finding some way to screw up in the NBA draft. This’ll be a close one to watch over the next few months as we get closer to the finals for the World Cup and the elections. Twitter is trying to bill itself as a home for news, focusing on live video, and a number of other things.

Then we have Juul Labs, an e-cigarette company that is somehow worth $10 billion. The Information reports that the PAX Labs spinout from 2015 has gone from a $250 million valuation all the way to $10 billion faster than you can name each scooter company that’s raising a new $200 million round from Sequoia that will have already been completed by the time you finish this sentence. Obviously the original cigarette industry was a complicated one circa the 20th century, so this one will be an interesting one to play out over the next few years.

Finally, we have meditation app Calm raising a $27 million round at a $250 million pre-money valuation. Calm isn’t the only mental health-focused startup that’s starting to pick up some momentum, but it’s one that’s a long time coming. I remember stumbling upon Calm.com back in 2012, where you’d just chill out on the website for a minute or so, so it’s fun to see a half-decade or so later that these apps are showing off some impressive numbers.

That’s all for this week, we’ll catch you guys next week. We apologize in advance if Alex makes it back on to the podcast.

Equity  drops every Friday at 6:00 am PT, so subscribe to us on Apple PodcastsOvercast, Pocketcast, Downcast and all the casts.

Powered by WPeMatico

Google StreetView cars to help map pollution in London

From next month two Google StreetView cars will be driving around London’s streets fitted with sensors that take air quality readings every 30 meters to map and monitor air quality in the UK capital.

There will also be 100 fixed sensors fitted to lampposts and buildings in pollution blackspots and sensitive locations in the city — creating a new air quality monitoring network that Sadiq Khan, London’s mayor, is billing as “the most sophisticated in the world”.

The goal with the year-long project is to generate hyperlocal data to help feed policy responses. Khan has made tackling air pollution one of his priorities.

It’s not the first time StreetView cars have been used as a vehicle for pollution monitoring. Three years ago sensors made by San Francisco startup Aclima were fitted to the cars to map air quality in the Bay Area.

The London project is using sensors made by UK company Air Monitors.

The air quality monitoring project is a partnership between the Greater London Authority and C40 Cities network — a coalition of major cities around the world which is focused on tackling climate change and increasing health and well-being.

The project is being led by the charity Environmental Defense Fund Europe, in partnership with Air Monitors, Google Earth Outreach, Cambridge Environmental Research Consultants, University of Cambridge, National Physical Laboratory, and the Environmental Defense Fund team in the United States.

King’s College London will also be undertaking a linked study focused on schools.

Results will be shared with members of the C40 Cities network — with the ambition of developing policy responses that help improve air quality for hundreds of millions of city dwellers around the world.

Powered by WPeMatico

Disrupting the paycheck, Gusto’s Flexible Pay allows employees to pick when they get paid

People should get paid for work they have done. It’s a pretty simple principle of capitalism, but a principle that seems increasingly violated in the modern economy. With semi-monthly paychecks, the work an employee does on the first day of the month won’t be paid until the end of the third week — a delay of up to 21 days. That delay is despite the massive digitalization of bank transfers and accounting over the past few decades that should have made paychecks far more regular.

Gusto, a payroll and HR benefits provider focused on small businesses, announced the launch of Flexible Pay today, a new feature that will allow its payroll users to select when they receive their income for work already completed. The feature, which must be switched on by an employer, will cost employers nothing out-of-pocket today. The launch is limited to customers in Texas, but will expand to other states in the coming year.

As Gusto CEO Joshua Reeves explained it to me, a kid mowing lawns in a neighborhood has a much more visceral connection to income than the modern knowledge economy worker. Cut the grass, get cash — it’s that simple. He also pointed out, with irony, that terminated employees experience much better payroll service than regular employees: they have to be paid out on their last day of work outside of the standard paycheck schedule. Reeves and his team wanted to offer that flexibility and convenience to every worker.

Flexible Pay allows users to choose when they get paid, outside of typical paycheck schedules

The key to this new feature has been Gusto’s increasing data about small businesses. Gusto now serves 1 percent of all small businesses in the U.S., and it has comprehensive access to its customers’ financial and payroll data. With integrations to time sheet services and proper risk modeling, Gusto is able to predict exactly what salary a worker has already earned, and can front the money at minimum risk to itself.

One major challenge for Gusto was how to reconcile the books of the employer with the irregular paycheck schedules desired by employees. Gusto handles all the logistics transparently, including tax withholding, so that for employers, the paycheck distribution looks and feels “normal” on its books.

That means that Gusto is effectively loaning money to companies, since it is paying payroll in advance. Gusto is funding those loans off its balance sheet today, but over time, the company expects to create a financial facility to underwrite the product.

For Reeves, Flexible Pay is “the right thing to do.” He believes that this new level of flexibility will empower workers to control their financial lives. In the long run, as more users get habituated to the product and its convenience, he hopes that the feature will draw other employers into using Gusto based on employee demand.

The unfortunate reality in the American workforce is that huge numbers of workers live paycheck-to-paycheck, by some counts as many as 80 percent. A bill can come due just a day or two before a paycheck hits, but without cash in a checking account, people often have to resort to predatory financial products like payday loans or high-interest credit cards in order to make ends meet. Flexible Pay is one step in the right direction of fighting for workers to get the money they justly deserve.

Powered by WPeMatico