Hacking Fitness vía Garmin Connect [Parte 2 de 2] #Garmin #Fitness

Tras encontrar en la primera parte de este artículo que en Google hay indexadas casi 100.00 URLs con datos de actividades de usuarios - más las que se puedan bruteforcear con alguna herramienta como OSR-Framework o el proyecto Dirty Business Card, vamos a continuar con la búsqueda de info-leaks que se producen en la plataforma Garmin Connect haciendo más uso de las sencillas técnicas de “Hacking con Buscadores”. Figura 11: Hacking Fitness vía Garmin Connect [Parte 2 de 2] Vamos a comenzar intentando hacer un perfilado de los usuarios por medio de la información que es pública de la plataforma y que, en principio, está indexada en Google. Profiling de usuarios Teniendo acceso de manera pública a las actividades de los usuarios, se comprueba cómo es posible acceder al perfil de cada uno de ellos, además de hacer “dorking” en función del patrón de URL del perfil de los usuarios: Figura 12: Dorking para buscar información de los perfiles de usuarios. En algunos perfiles, se observa que el punto de origen de la actividad y el punto de finalización es el mismo, lo que hace suponer que vive allí o en un lugar muy próximo a él. Esto es algo que ya se había visto en el caso de las bases secretas militares con los datos de Strava o en el caso de Endomondo con Robme. No se debe dar activar el origen y el final de una ruta de deporte pública en la ubicación en la que uno vive. Figura 13: Usuarios en repetidas actividades con mismo lugar de origen y final Estos usuarios con el mismo punto de origen y de finalización de la actividad física podrían estar dando información que afecte a su seguridad física personal, sobre todo si es relativa a rutinas constantes de la persona. Figura 14: También se deja, como se ve, la información del dispositivo Garmin usado. Dado que la plataforma hace uso del servicio Google Maps, es posible obtener información más detallada de los puntos de origen y finalización de la actividad, como por ejemplo el nombre y número de las calles donde se comienza y termina una ruta. Figura 15: Información más precisa de los puntos de origen y de finalización de la actividad. Pero con esta información, ya se puede continuar con un proceso e OSINT más completo sobre la persona, ya que se ha dado demasiada información pública a todo el mundo. Vamos a ver cómo estos datos pueden seguir alimentando bases de datos con nuestra privacidad personal. Datos de carácter personal del usuario Hasta este momento, tendríamos el nombre y apellidos del usuario, así como el nombre de la ciudad y calles que más frecuenta porque en ellas inicia o termina buena parte de sus actividades deportivas. También aparece en el perfil de los usuarios el nombre de sus perfiles en otras redes sociales. Figura 16: Información de las redes sociales utilizadas por uno de los usuarios Con la información anterior, sería relativamente sencillo obtener datos de carácter personal de los usuarios, siempre y cuando se hayan publicado en Internet previamente y no se hayan eliminado. Una buena fuente son las clasificaciones en las carreras, que al final dejan información pública de todos los deportistas que han participado. En la siguiente imagen incluso aparece un correo electrónico de uno de los usuarios: Figura 17: Dirección de correo electrónico indexada por Google Con el nombre de correo electrónico es posible extraer el nombre y apellidos del usuario, ya que ha utilizado esa cuenta de correo para utilizar servicios en Internet en lo que ha introducido datos de carácter personal. Hay muchas bases de datos en la red con esta información, así que hay que tener mucho cuidado con dónde están publicados nuestros datos. Figura 18: Datos de carácter personal del usuario publicados en web de teléfonos Y ya, para terminar de perfilar a los usuarios y tener toda la información de una determinada zona geográfica para hacer una base de datos con los vecinos y correr algoritmos de Machine Learning que los agrupen en grupos de Insights, podemos seguir tirando del hilo. Marca y modelo del smartphone del usuario Con el nombre de usuario de la cuenta de correo electrónico anterior, se puede probar el en el servicio de correo electrónico de Google para tratar de obtener qué dispositivo móvil tiene, en caso de que éste esté vinculado a una cuenta de correo electrónico de Gmail y el usuario utilice este servicio, como ya vimos en un artículo anterior. Figura 19: Información del dispositivo móvil utilizado por el usuario con la cuenta de correo electrónico vinculada a él Con las opciones del servicio de correo electrónico y de recuperación de la contraseña que proporciona Gmail se determina que el usuario dispone de una cuenta de correo en Gmail y que ésta se encuentra vinculada a un dispositivo móvil, un “Huawei Honor View 10”, que probablemente da alguna idea de los gustos, preferencias o ideas de una persona sobre algunos temas tecnológicos o económicos. Conclusiones sobre este artículo Si usas la plataforma Garmin Connect y no quieres que tus datos personales queden expuestos o se pueda llegar hasta ellos por una configuración laxa de la privacidad de tu cuenta, puedes utilizar la configuración de privacidad que se muestra en la siguiente imagen: Figura 20: Configuración de privacidad de Garmin Connect Lo ideal y respetuoso para la privacidad del usuario es que todos los perfiles tuvieran la opción por defecto de que los datos no los pudiera ver nadie, y además las apps y opciones de UX no deberían a incitar a su publicación. Pero si usas esta plataforma de Garmin Connect las recomendaciones básicas son: Configura el perfil para que sólo tú puedas ver la información que aparece en él. Sería aconsejable que nadie más que tú vea la información de las actividades o del histórico de actividades que has realizado. Si quieres, puedes proporcionar información a Garmin de las rutas que realizas para de esta forma ayudar a la plataforma a que clasifique las rutas en función de su popularidad. Nadie más que Garmin va a disponer de esa información…. en teoría… ;)Por último, recuerda que si dejas información pública del origen y final de tus rutas podrías estar publicando donde vives a todo el mundo y que si publicas información de tu pulsómetro podrías dar información de tu estado de salud que pudiera ser utilizada por terceros con fines negativos para ti, así que cuida tu privacidad al máximo. Autor: Amador Aparicio de la Fuente (@amadapa), escritor de libro “Hacking Web Technologies” ****************************************************************************************************** - Hacking Fitness vía Garmin Connect [Parte 1 de 2] - Hacking Fitness vía Garmin Connect [Parte 2 de 2] ****************************************************************************************************** Sigue Un informático en el lado del mal - Google+ RSS 0xWord
from Tumblr https://eduardoromerorest.tumblr.com/post/184406264321/hacking-fitness-v%C3%ADa-garmin-connect-parte-2-de-2
via IFTTT

Día del libro en @0xWord Código 10% descuento: DIALIBRO2019 #DiaLibro #DiaDelLibro

Hoy día 23 de Abril de 2019 nos sumamos a la celebración del Día del Libro en 0xWord, así que vamos a hacer un 10% de descuento en todo el material de nuestra tienda online utilizando el código “DIALIBRO2019” que estará disponible desde las 00:00:00 horas hasta las 23:59:59. Figura 1: Día del libro en 0xWord Código 10% descuento: DIALIBRO2019 El cupón permite conseguir todos nuestros libros con un precio menor de 20 €, y los packs de cinco libros con unos precios en los que el libro sale por unos 15 € más o menos. Una ocasión fundamental para conseguir el material para estudiar, regalar a compañeros en próximos cumpleaños, o disfrutar en forma de pegatinas, cómics o pósters. Figura 2: Recomendación de tracks con libros de 0xWord Mantener una editorial low-cost como 0xWord no es una tarea fácil, y aunque el descuento es sólo de un 10%, si no fuera por todos los autores que dedican su esfuerzo a escribir los libros con ilusión y afán de compartir, y los que compráis los libros, no sería posible. Mantener durante los últimos tres años el mismo precio del libro sin hacer ningún cambio o ajuste de precio, es una tarea que sin todos los que apoyáis a 0xWord sería imposible. Gracias. Saludos Malignos! Sigue Un informático en el lado del mal - Google+ RSS 0xWord
from Tumblr https://eduardoromerorest.tumblr.com/post/184375125911/d%C3%ADa-del-libro-en-0xword-c%C3%B3digo-10-descuento
via IFTTT

The Fractured Web

Anyone can argue about the intent of a particular action & the outcome that is derived by it. But when the outcome is known, at some point the intent is inferred if the outcome is derived from a source of power & the outcome doesn’t change. Or, put another way, if a powerful entity (government, corporation, other organization) disliked an outcome which appeared to benefit them in the short term at great lasting cost to others, they could spend resources to adjust the system. If they don’t spend those resources (or, rather, spend them on lobbying rather than improving the ecosystem) then there is no desired change. The outcome is as desired. Change is unwanted. Engagement is a toxic metric.Products which optimize for it become worse. People who optimize for it become less happy.It also seems to generate runaway feedback loops where most engagable people have a) worst individual experiences and then b) end up driving the product bus.— Patrick McKenzie (@patio11) April 9, 2019 News is a stock vs flow market where the flow of recent events drives most of the traffic to articles. News that is more than a couple days old is no longer news. A news site which stops publishing news stops becoming a habit & quickly loses relevancy. Algorithmically an abandoned archive of old news articles doesn’t look much different than eHow, in spite of having a much higher cost structure. According to SEMrush’s traffic rank, ampproject.org gets more monthly visits than Yahoo.com. That actually understates the prevalence of AMP because AMP is generally designed for mobile AND not all AMP-formatted content is displayed on ampproject.org. Part of how AMP was able to get widespread adoption was because in the news vertical the organic search result set was displaced by an AMP block. If you were a news site either you were so differentiated that readers would scroll past the AMP block in the search results to look for you specifically, or you adopted AMP, or you were doomed. Some news organizations like The Guardian have a team of about a dozen people reformatting their content to the duplicative & proprietary AMP format. That’s wasteful, but necessary “In theory, adoption of AMP is voluntary. In reality, publishers that don’t want to see their search traffic evaporate have little choice. New data from publisher analytics firm Chartbeat shows just how much leverage Google has over publishers thanks to its dominant search engine.” It seems more than a bit backward that low margin publishers are doing duplicative work to distance themselves from their own readers while improving the profit margins of monopolies. But it is what it is. And that no doubt drew the ire of many publishers across the EU. And now there are AMP Stories to eat up even more visual real estate. If you spent a bunch of money to create a highly differentiated piece of content, why would you prefer that high spend flaghship content appear on a third party website rather than your own? Google & Facebook have done such a fantastic job of eating the entire pie that some are celebrating Amazon as a prospective savior to the publishing industry. That view - IMHO - is rather suspect. Where any of the tech monopolies dominate they cram down on partners. The New York Times acquired The Wirecutter in Q4 of 2016. In Q1 of 2017 Amazon adjusted their affiliate fee schedule. Amazon generally treats consumers well, but they have been much harder on business partners with tough pricing negotiations, counterfeit protections, forced ad buying to have a high enough product rank to be able to rank organically, ad displacement of their organic search results below the fold (even for branded search queries), learning suppliers & cutting out the partners, private label products patterned after top sellers, in some cases running pop over ads for the private label products on product level pages where brands already spent money to drive traffic to the page, etc. They’ve made things tougher for their partners in a way that mirrors the impact Facebook & Google have had on online publishers: “Boyce’s experience on Amazon largely echoed what happens in the offline world: competitors entered the market, pushing down prices and making it harder to make a profit. So Boyce adapted. He stopped selling basketball hoops and developed his own line of foosball tables, air hockey tables, bocce ball sets and exercise equipment. The best way to make a decent profit on Amazon was to sell something no one else had and create your own brand. … Amazon also started selling bocce ball sets that cost $15 less than Boyce’s. He says his products are higher quality, but Amazon gives prominent page space to its generic version and wins the cost-conscious shopper.” Google claims they have no idea how content publishers are with the trade off between themselves & the search engine, but every quarter Alphabet publish the share of ad spend occurring on owned & operated sites versus the share spent across the broader publisher network. And in almost every quarter for over a decade straight that ratio has grown worse for publishers. When Google tells industry about how much $ it funnels to rest of ecosystem, just show them this chart. It’s good to be the “revenue regulator” (note: G went public in 2004). pic.twitter.com/HCbCNgbzKc— Jason Kint (@jason_kint) February 5, 2019 The aggregate numbers for news publishers are worse than shown above as Google is ramping up ads in video games quite hard. They’ve partnered with Unity & promptly took away the ability to block ads from appearing in video games using googleadsenseformobileapps.com exclusion (hello flat thumb misclicks, my name is budget & I am gone!) They will also track video game player behavior & alter game play to maximize revenues based on machine learning tied to surveillance of the user’s account: “We’re bringing a new approach to monetization that combines ads and in-app purchases in one automated solution. Available today, new smart segmentation features in Google AdMob use machine learning to segment your players based on their likelihood to spend on in-app purchases. Ad units with smart segmentation will show ads only to users who are predicted not to spend on in-app purchases. Players who are predicted to spend will see no ads, and can simply continue playing.” And how does the growth of ampproject.org square against the following wisdom? If you do use a CDN, I’d recommend using a domain name of your own (eg, https://t.co/fWMc6CFPZ0), so you can move to other CDNs if you feel the need to over time, without having to do any redirects.— John (@JohnMu) April 15, 2019 Literally only yesterday did Google begin supporting instant loading of self-hosted AMP pages. China has a different set of tech leaders than the United States. Baidu, Alibaba, Tencent (BAT) instead of Facebook, Amazon, Apple, Netflix, Google (FANG). China tech companies may have won their domestic markets in part based on superior technology or better knowledge of the local culture, though those same companies have largely went nowhere fast in most foreign markets. A big part of winning was governmental assistance in putting a foot on the scales. Part of the US-China trade war is about who controls the virtual “seas” upon which value flows: it can easily be argued that the last 60 years were above all the era of the container-ship (with container-ships getting ever bigger). But will the coming decades still be the age of the container-ship? Possibly not, for the simple reason that things that have value increasingly no longer travel by ship, but instead by fiberoptic cables! … you could almost argue that ZTE and Huawei have been the “East India Company” of the current imperial cycle. Unsurprisingly, it is these very companies, charged with laying out the “new roads” along which “tomorrow’s value” will flow, that find themselves at the center of the US backlash. … if the symbol of British domination was the steamship, and the symbol of American strength was the Boeing 747, it seems increasingly clear that the question of the future will be whether tomorrow’s telecom switches and routers are produced by Huawei or Cisco. … US attempts to take down Huawei and ZTE can be seen as the existing empire’s attempt to prevent the ascent of a new imperial power. With this in mind, I could go a step further and suggest that perhaps the Huawei crisis is this century’s version of Suez crisis. No wonder markets have been falling ever since the arrest of the Huawei CFO. In time, the Suez Crisis was brought to a halt by US threats to destroy the value of sterling. Could we now witness the same for the US dollar? China maintains Huawei is an employee-owned company. But that proposition is suspect. Broadly stealing technology is vital to the growth of the Chinese economy & they have no incentive to stop unless their leading companies pay a direct cost. Meanwhile, China is investigating Ericsson over licensing technology. India has taken notice of the success of Chinese tech companies & thus began to promote “national champion” company policies. That, in turn, has also meant some of the Chinese-styled laws requiring localized data, antitrust inquiries, foreign ownership restrictions, requirements for platforms to not sell their own goods, promoting limits on data encryption, etc. The secretary of India’s Telecommunications Department, Aruna Sundararajan, last week told a gathering of Indian startups in a closed-door meeting in the tech hub of Bangalore that the government will introduce a “national champion” policy “very soon” to encourage the rise of Indian companies, according to a person familiar with the matter. She said Indian policy makers had noted the success of China’s internet giants, Alibaba Group Holding Ltd. and Tencent Holdings Ltd. … Tensions began rising last year, when New Delhi decided to create a clearer set of rules for e-commerce and convened a group of local players to solicit suggestions. Amazon and Flipkart, even though they make up more than half the market, weren’t invited, according to people familiar with the matter. Amazon vowed to invest $5 billion in India & they have done some remarkable work on logistics there. Walmart acquired Flipkart for $16 billion. Other emerging markets also have many local ecommerce leaders like Jumia, MercadoLibre, OLX, Gumtree, Takealot, Konga, Kilimall, BidOrBuy, Tokopedia, Bukalapak, Shoppee, Lazada. If you live in the US you may have never heard of *any* of those companies. And if you live in an emerging market you may have never interacted with Amazon or eBay. It makes sense that ecommerce leadership would be more localized since it requires moving things in the physical economy, dealing with local currencies, managing inventory, shipping goods, etc. whereas information flows are just bits floating on a fiber optic cable. If the Internet is primarily seen as a communications platform it is easy for people in some emerging markets to think Facebook is the Internet. Free communication with friends and family members is a compelling offer & as the cost of data drops web usage increases. At the same time, the web is incredibly deflationary. Every free form of entertainment which consumes time is time that is not spent consuming something else. Add the technological disruption to the wealth polarization that happened in the wake of the great recession, then combine that with algorithms that promote extremist views & it is clearly causing increasing conflict. If you are a parent and you think you child has no shot at a brighter future than your own life it is easy to be full of rage. Empathy can radicalize otherwise normal people by giving them a more polarized view of the world: Starting around 2000, the line starts to slide. More students say it’s not their problem to help people in trouble, not their job to see the world from someone else’s perspective. By 2009, on all the standard measures, Konrath found, young people on average measure 40 percent less empathetic than my own generation … The new rule for empathy seems to be: reserve it, not for your “enemies,” but for the people you believe are hurt, or you have decided need it the most. Empathy, but just for your own team. And empathizing with the other team? That’s practically a taboo. A complete lack of empathy could allow a psychopath (hi Chris!) to commit extreme crimes while feeling no guilt, shame or remorse. Extreme empathy can have the same sort of outcome: “Sometimes we commit atrocities not out of a failure of empathy but rather as a direct consequence of successful, even overly successful, empathy. … They emphasized that students would learn both sides, and the atrocities committed by one side or the other were always put into context. Students learned this curriculum, but follow-up studies showed that this new generation was more polarized than the one before. … [Empathy] can be good when it leads to good action, but it can have downsides. For example, if you want the victims to say ‘thank you.’ You may even want to keep the people you help in that position of inferior victim because it can sustain your feeling of being a hero.” - Fritz Breithaupt News feeds will be read. Villages will be razed. Lynch mobs will become commonplace. Many people will end up murdered by algorithmically generated empathy. As technology increases absentee ownership & financial leverage, a society led by morally agnostic algorithms is not going to become more egalitarian. The more I think about and discuss it, the more I think WhatsApp is simultaneously the future of Facebook, and the most potentially dangerous digital tool yet created. We haven’t even begun to see the real impact yet of ubiquitous, unfettered and un-moderatable human telepathy.— Antonio García Martínez (@antoniogm) April 15, 2019 When politicians throw fuel on the fire it only gets worse: It’s particularly odd that the government is demanding “accountability and responsibility” from a phone app when some ruling party politicians are busy spreading divisive fake news. How can the government ask WhatsApp to control mobs when those convicted of lynching Muslims have been greeted, garlanded and fed sweets by some of the most progressive and cosmopolitan members of Modi’s council of ministers? Mark Zuckerburg won’t get caught downstream from platform blowback as he spends $20 million a year on his security. The web is a mirror. Engagement-based algorithms reinforcing our perceptions & identities. And every important story has at least 2 sides! The Rohingya asylum seekers are victims of their own violent Jihadist leadership that formed a militia to kill Buddhists and Hindus. Hindus are being massacred, where’s the outrage for them!? https://t.co/P3m6w4B1Po— Imam Tawhidi (@Imamofpeace) May 23, 2018 Some may “learn” vaccines don’t work. Others may learn the vaccines their own children took did not work, as it failed to protect them from the antivax content spread by Facebook & Google, absorbed by people spreading measles & Medieval diseases. Passion drives engagement, which drives algorithmic distribution: “There’s an asymmetry of passion at work. Which is to say, there’s very little counter-content to surface because it simply doesn’t occur to regular people (or, in this case, actual medical experts) that there’s a need to produce counter-content.” As the costs of “free” become harder to hide, social media companies which currently sell emerging markets as their next big growth area will end up having embedded regulatory compliance costs which will end up exceeding any sort of prospective revenue they could hope to generate. The Pinterest S1 shows almost all their growth is in emerging markets, yet almost all their revenue is inside the United States. As governments around the world see the real-world cost of the foreign tech companies & view some of them as piggy banks, eventually the likes of Facebook or Google will pull out of a variety of markets they no longer feel worth serving. It will be like Google did in mainland China with search after discovering pervasive hacking of activist Gmail accounts. Just tried signing into Gmail from a new device. Unless I provide a phone number, there is no way to sign in and no one to call about it. Oh, and why do they say they need my phone? If you guessed “for my protection,” you would be correct. Talk about Big Brother…— Simon Mikhailovich (@S_Mikhailovich) April 16, 2019 Lower friction & lower cost information markets will face more junk fees, hurdles & even some legitimate regulations. Information markets will start to behave more like physical goods markets. The tech companies presume they will be able to use satellites, drones & balloons to beam in Internet while avoiding messy local issues tied to real world infrastructure, but when a local wealthy player is betting against them they’ll probably end up losing those markets: “One of the biggest cheerleaders for the new rules was Reliance Jio, a fast-growing mobile phone company controlled by Mukesh Ambani, India’s richest industrialist. Mr. Ambani, an ally of Mr. Modi, has made no secret of his plans to turn Reliance Jio into an all-purpose information service that offers streaming video and music, messaging, money transfer, online shopping, and home broadband services.” Publishers do not have “their mojo back” because the tech companies have been so good to them, but rather because the tech companies have been so aggressive that they’ve earned so much blowback which will in turn lead publishers to opting out of future deals, which will eventually lead more people back to the trusted brands of yesterday. Publishers feeling guilty about taking advertorial money from the tech companies to spread their propaganda will offset its publication with opinion pieces pointing in the other direction: “This is a lobbying campaign in which buying the good opinion of news brands is clearly important. If it was about reaching a target audience, there are plenty of metrics to suggest his words would reach further – at no cost – on Facebook. Similarly, Google is upping its presence in a less obvious manner via assorted media initiatives on both sides of the Atlantic. Its more direct approach to funding journalism seems to have the desired effect of making all media organisations (and indeed many academic institutions) touched by its money slightly less questioning and critical of its motives.” When Facebook goes down direct visits to leading news brand sites go up. When Google penalizes a no-name me-too site almost nobody realizes it is missing. But if a big publisher opts out of the ecosystem people will notice. The reliance on the tech platforms is largely a mirage. If enough key players were to opt out at the same time people would quickly reorient their information consumption habits. If the platforms can change their focus overnight then why can’t publishers band together & choose to dump them? CEO Jack Dorsey said Twitter is looking to change the focus from following specific individuals to topics of interest, acknowledging that what’s incentivized today on the platform is at odds with the goal of healthy dialoguehttps://t.co/31FYslbePA— Axios (@axios) April 16, 2019 In Europe there is GDPR, which aimed to protect user privacy, but ultimately acted as a tax on innovation by local startups while being a subsidy to the big online ad networks. They also have Article 11 & Article 13, which passed in spite of Google’s best efforts on the scaremongering anti-SERP tests, lobbying & propaganda fronts: “Google has sparked criticism by encouraging news publishers participating in its Digital News Initiative to lobby against proposed changes to EU copyright law at a time when the beleaguered sector is increasingly turning to the search giant for help.” Remember the Eric Schmidt comment about how brands are how you sort out (the non-YouTube portion of) the cesspool? As it turns out, he was allegedly wrong as Google claims they have been fighting for the little guy the whole time: Article 11 could change that principle and require online services to strike commercial deals with publishers to show hyperlinks and short snippets of news. This means that search engines, news aggregators, apps, and platforms would have to put commercial licences in place, and make decisions about which content to include on the basis of those licensing agreements and which to leave out. Effectively, companies like Google will be put in the position of picking winners and losers. … Why are large influential companies constraining how new and small publishers operate? … The proposed rules will undoubtedly hurt diversity of voices, with large publishers setting business models for the whole industry. This will not benefit all equally. … We believe the information we show should be based on quality, not on payment. Facebook claims there is a local news problem: “Facebook Inc. has been looking to boost its local-news offerings since a 2017 survey showed most of its users were clamoring for more. It has run into a problem: There simply isn’t enough local news in vast swaths of the country. … more than one in five newspapers have closed in the past decade and a half, leaving half the counties in the nation with just one newspaper, and 200 counties with no newspaper at all.” Google is so for the little guy that for their local news experiments they’ve partnered with a private equity backed newspaper roll up firm & another newspaper chain which did overpriced acquisitions & is trying to act like a PE firm (trying to not get eaten by the PE firm). Does the above stock chart look in any way healthy? Does it give off the scent of a firm that understood the impact of digital & rode it to new heights? If you want good market-based outcomes, why not partner with journalists directly versus operating through PE chop shops? If Patch is profitable & Google were a neutral ranking system based on quality, couldn’t Google partner with journalists directly? Throwing a few dollars at a PE firm in some nebulous partnership sure beats the sort of regulations coming out of the EU. And the EU’s regulations (and prior link tax attempts) are in addition to the three multi billion Euro fines the European Union has levied against Alphabet for shopping search, Android & AdSense. Google was also fined in Russia over Android bundling. The fine was tiny, but after consumers gained a search engine choice screen (much like Google pushed for in Europe on Microsoft years ago) Yandex’s share of mobile search grew quickly. The UK recently published a white paper on online harms. In some ways it is a regulation just like the tech companies might offer to participants in their ecosystems: Companies will have to fulfil their new legal duties or face the consequences and “will still need to be compliant with the overarching duty of care even where a specific code does not exist, for example assessing and responding to the risk associated with emerging harms or technology”. If web publishers should monitor inbound links to look for anything suspicious then the big platforms sure as hell have the resources & profit margins to monitor behavior on their own websites. Australia passed the Sharing of Abhorrent Violent Material bill which requires platforms to expeditiously remove violent videos & notify the Australian police about them. There are other layers of fracturing going on in the web as well. Programmatic advertising shifted revenue from publishers to adtech companies & the largest ad sellers. Ad blockers further lower the ad revenues of many publishers. If you routinely use an ad blocker, try surfing the web for a while without one & you will notice layover welcome AdSense ads on sites as you browse the web - the very type of ad they were allegedly against when promoting AMP. There has been much more press in the past week about ad blocking as Google’s influence is being questioned as it rolls out ad blocking as a feature built into Google’s dominant Chrome web browser. https://t.co/LQmvJu9MYB— Jason Kint (@jason_kint) February 19, 2018 Tracking protection in browsers & ad blocking features built directly into browsers leave publishers more uncertain. And who even knows who visited an AMP page hosted on a third party server, particularly when things like GDPR are mixed in? Those who lack first party data may end up having to make large acquisitions to stay relevant. Voice search & personal assistants are now ad channels. Google Assistant Now Showing Sponsored Link Ads for Some Travel Related Queries “Similar results are delivered through both Google Home and Google Home Hub without the sponsored links.” https://t.co/jSVKKI2AYT via @bretkinsella pic.twitter.com/0sjAswy14M— Glenn Gabe (@glenngabe) April 15, 2019 App stores are removing VPNs in China, removing Tiktok in India, and keeping female tracking apps in Saudi Arabia. App stores are centralized chokepoints for governments. Every centralized service is at risk of censorship. Web browsers from key state-connected players can also censor messages spread by developers on platforms like GitHub. Microsoft’s newest Edge web browser is based on Chromium, the source of Google Chrome. While Mozilla Firefox gets most of their revenue from a search deal with Google, Google has still went out of its way to use its services to both promote Chrome with pop overs AND break in competing web browsers: “All of this is stuff you’re allowed to do to compete, of course. But we were still a search partner, so we’d say ‘hey what gives?’ And every time, they’d say, ‘oops. That was accidental. We’ll fix it in the next push in 2 weeks.’ Over and over. Oops. Another accident. We’ll fix it soon. We want the same things. We’re on the same team. There were dozens of oopses. Hundreds maybe?” - former Firefox VP Jonathan Nightingale This is how it spreads. Google normalizes “web apps” that are really just Chrome apps. Then others follow. We’ve been here before, y’all. Remember IE? Browser hegemony is not a happy place. https://t.co/b29EvIty1H— DHH (@dhh) April 1, 2019 In fact, it’s alarming how much of Microsoft’s cut-off-the-air-supply playbook on browser dominance that Google is emulating. From browser-specific apps to embrace-n-extend AMP “standards”. It’s sad, but sadder still is when others follow suit.— DHH (@dhh) April 1, 2019 YouTube page load is 5x slower in Firefox and Edge than in Chrome because YouTube’s Polymer redesign relies on the deprecated Shadow DOM v0 API only implemented in Chrome. You can restore YouTube’s faster pre-Polymer design with this Firefox extension: https://t.co/F5uEn3iMLR— Chris Peterson (@cpeterso) July 24, 2018 As phone sales fall & app downloads stall a hardware company like Apple is pushing hard into services while quietly raking in utterly fantastic ad revenues from search & ads in their app store. Part of the reason people are downloading fewer apps is so many apps require registration as soon as they are opened, or only let a user engage with them for seconds before pushing aggressive upsells. And then many apps which were formerly one-off purchases are becoming subscription plays. As traffic acquisition costs have jumped, many apps must engage in sleight of hand behaviors (free but not really, we are collecting data totally unrelated to the purpose of our app & oops we sold your data, etc.) in order to get the numbers to back out. This in turn causes app stores to slow down app reviews. Apple acquired the news subscription service Texture & turned it into Apple News Plus. Not only is Apple keeping half the subscription revenues, but soon the service will only work for people using Apple devices, leaving nearly 100,000 other subscribers out in the cold: “if you’re part of the 30% who used Texture to get your favorite magazines digitally on Android or Windows devices, you will soon be out of luck. Only Apple iOS devices will be able to access the 300 magazines available from publishers. At the time of the sale in March 2018 to Apple, Texture had about 240,000 subscribers.” Apple is also going to spend over a half-billion Dollars exclusively licensing independently developed games: Several people involved in the project’s development say Apple is spending several million dollars each on most of the more than 100 games that have been selected to launch on Arcade, with its total budget likely to exceed $500m. The games service is expected to launch later this year. … Apple is offering developers an extra incentive if they agree for their game to only be available on Arcade, withholding their release on Google’s Play app store for Android smartphones or other subscription gaming bundles such as Microsoft’s Xbox game pass. Verizon wants to launch a video game streaming service. It will probably be almost as successful as their Go90 OTT service was. Microsoft is pushing to make Xbox games work on Android devices. Amazon is developing a game streaming service to compliment Twitch. The hosts on Twitch, some of whom sign up exclusively with the platform in order to gain access to its moneymaking tools, are rewarded for their ability to make a connection with viewers as much as they are for their gaming prowess. Viewers who pay $4.99 a month for a basic subscription — the money is split evenly between the streamers and Twitch — are looking for immediacy and intimacy. While some hosts at YouTube Gaming offer a similar experience, they have struggled to build audiences as large, and as dedicated, as those on Twitch. … While YouTube has made millionaires out of the creators of popular videos through its advertising program, Twitch’s hosts make money primarily from subscribers and one-off donations or tips. YouTube Gaming has made it possible for viewers to support hosts this way, but paying audiences haven’t materialized at the scale they have on Twitch. Google, having a bit of Twitch envy, is also launching a video game streaming service which will be deeply integrated into YouTube: “With Stadia, YouTube watchers can press “Play now” at the end of a video, and be brought into the game within 5 seconds. The service provides “instant access” via button or link, just like any other piece of content on the web.” Google will also launch their own game studio making exclusive games for their platform. When consoles don’t use discs or cartridges so they can sell a subscription access to their software library it is hard to be a game retailer! GameStop’s stock has been performing like an ICO. And these sorts of announcements from the tech companies have been hitting stock prices for companies like Nintendo & Sony: “There is no doubt this service makes life even more difficult for established platforms,” Amir Anvarzadeh, a market strategist at Asymmetric Advisors Pte, said in a note to clients. “Google will help further fragment the gaming market which is already coming under pressure by big games which have adopted the mobile gaming business model of giving the titles away for free in hope of generating in-game content sales.” The big tech companies which promoted everything in adjacent markets being free are now erecting paywalls for themselves, balkanizing the web by paying for exclusives to drive their bundled subscriptions. How many paid movie streaming services will the web have by the end of next year? 20? 50? Does anybody know? Disney alone with operate Disney+, ESPN+ as well as Hulu. And then the tech companies are not only licensing exclusives to drive their subscription-based services, but we’re going to see more exclusionary policies like YouTube not working on Amazon Echo, Netflix dumping support for Apple’s Airplay, or Amazon refusing to sell devices like Chromecast or Apple TV. The good news in a fractured web is a broader publishing industry that contains many micro markets will have many opportunities embedded in it. A Facebook pivot away from games toward news, or a pivot away from news toward video won’t kill third party publishers who have a more diverse traffic profile and more direct revenues. And a regional law blocking porn or gambling websites might lead to an increase in demand for VPNs or free to play points-based games with paid upgrades. Even the rise of metered paywalls will lead to people using more web browsers & more VPNs. Each fracture (good or bad) will create more market edges & ultimately more opportunities. Chinese enforcement of their gambling laws created a real estate boom in Manila. So long as there are 4 or 5 game stores, 4 or 5 movie streaming sites, etc. … they have to compete on merit or use money to try to buy exclusives. Either way is better than the old monopoly strategy of take it or leave it ultimatums. The publisher wins because there is a competitive bid. There won’t be an arbitrary 30% tax on everything. So long as there is competition from the open web there will be means to bypass the junk fees & the most successful companies that do so might create their own stores with a lower rate: “Mr. Schachter estimates that Apple and Google could see a hit of about 14% to pretax earnings if they reduced their own app commissions to match Epic’s take.” As the big media companies & big tech companies race to create subscription products they’ll spend many billions on exclusives. And they will be training consumers that there’s nothing wrong with paying for content. This will eventually lead to hundreds of thousands or even millions of successful niche publications which have incentives better aligned than all the issues the ad supported web has faced. Categories: publishing & media from SEO Book http://www.seobook.com/fractured via IFTTT from Local SEO Guru https://localseoguru.tumblr.com/post/184254147558 via IFTTT from Tomeu Capella https://tomeucapella.tumblr.com/post/184370970615 via IFTTT
from Tumblr https://eduardoromerorest.tumblr.com/post/184371054311/the-fractured-web
via IFTTT

The Fractured Web

Anyone can argue about the intent of a particular action & the outcome that is derived by it. But when the outcome is known, at some point the intent is inferred if the outcome is derived from a source of power & the outcome doesn’t change. Or, put another way, if a powerful entity (government, corporation, other organization) disliked an outcome which appeared to benefit them in the short term at great lasting cost to others, they could spend resources to adjust the system. If they don’t spend those resources (or, rather, spend them on lobbying rather than improving the ecosystem) then there is no desired change. The outcome is as desired. Change is unwanted. Engagement is a toxic metric.Products which optimize for it become worse. People who optimize for it become less happy.It also seems to generate runaway feedback loops where most engagable people have a) worst individual experiences and then b) end up driving the product bus.— Patrick McKenzie (@patio11) April 9, 2019 News is a stock vs flow market where the flow of recent events drives most of the traffic to articles. News that is more than a couple days old is no longer news. A news site which stops publishing news stops becoming a habit & quickly loses relevancy. Algorithmically an abandoned archive of old news articles doesn’t look much different than eHow, in spite of having a much higher cost structure. According to SEMrush’s traffic rank, ampproject.org gets more monthly visits than Yahoo.com. That actually understates the prevalence of AMP because AMP is generally designed for mobile AND not all AMP-formatted content is displayed on ampproject.org. Part of how AMP was able to get widespread adoption was because in the news vertical the organic search result set was displaced by an AMP block. If you were a news site either you were so differentiated that readers would scroll past the AMP block in the search results to look for you specifically, or you adopted AMP, or you were doomed. Some news organizations like The Guardian have a team of about a dozen people reformatting their content to the duplicative & proprietary AMP format. That’s wasteful, but necessary “In theory, adoption of AMP is voluntary. In reality, publishers that don’t want to see their search traffic evaporate have little choice. New data from publisher analytics firm Chartbeat shows just how much leverage Google has over publishers thanks to its dominant search engine.” It seems more than a bit backward that low margin publishers are doing duplicative work to distance themselves from their own readers while improving the profit margins of monopolies. But it is what it is. And that no doubt drew the ire of many publishers across the EU. And now there are AMP Stories to eat up even more visual real estate. If you spent a bunch of money to create a highly differentiated piece of content, why would you prefer that high spend flaghship content appear on a third party website rather than your own? Google & Facebook have done such a fantastic job of eating the entire pie that some are celebrating Amazon as a prospective savior to the publishing industry. That view - IMHO - is rather suspect. Where any of the tech monopolies dominate they cram down on partners. The New York Times acquired The Wirecutter in Q4 of 2016. In Q1 of 2017 Amazon adjusted their affiliate fee schedule. Amazon generally treats consumers well, but they have been much harder on business partners with tough pricing negotiations, counterfeit protections, forced ad buying to have a high enough product rank to be able to rank organically, ad displacement of their organic search results below the fold (even for branded search queries), learning suppliers & cutting out the partners, private label products patterned after top sellers, in some cases running pop over ads for the private label products on product level pages where brands already spent money to drive traffic to the page, etc. They’ve made things tougher for their partners in a way that mirrors the impact Facebook & Google have had on online publishers: “Boyce’s experience on Amazon largely echoed what happens in the offline world: competitors entered the market, pushing down prices and making it harder to make a profit. So Boyce adapted. He stopped selling basketball hoops and developed his own line of foosball tables, air hockey tables, bocce ball sets and exercise equipment. The best way to make a decent profit on Amazon was to sell something no one else had and create your own brand. … Amazon also started selling bocce ball sets that cost $15 less than Boyce’s. He says his products are higher quality, but Amazon gives prominent page space to its generic version and wins the cost-conscious shopper.” Google claims they have no idea how content publishers are with the trade off between themselves & the search engine, but every quarter Alphabet publish the share of ad spend occurring on owned & operated sites versus the share spent across the broader publisher network. And in almost every quarter for over a decade straight that ratio has grown worse for publishers. When Google tells industry about how much $ it funnels to rest of ecosystem, just show them this chart. It’s good to be the “revenue regulator” (note: G went public in 2004). pic.twitter.com/HCbCNgbzKc— Jason Kint (@jason_kint) February 5, 2019 The aggregate numbers for news publishers are worse than shown above as Google is ramping up ads in video games quite hard. They’ve partnered with Unity & promptly took away the ability to block ads from appearing in video games using googleadsenseformobileapps.com exclusion (hello flat thumb misclicks, my name is budget & I am gone!) They will also track video game player behavior & alter game play to maximize revenues based on machine learning tied to surveillance of the user’s account: “We’re bringing a new approach to monetization that combines ads and in-app purchases in one automated solution. Available today, new smart segmentation features in Google AdMob use machine learning to segment your players based on their likelihood to spend on in-app purchases. Ad units with smart segmentation will show ads only to users who are predicted not to spend on in-app purchases. Players who are predicted to spend will see no ads, and can simply continue playing.” And how does the growth of ampproject.org square against the following wisdom? If you do use a CDN, I’d recommend using a domain name of your own (eg, https://t.co/fWMc6CFPZ0), so you can move to other CDNs if you feel the need to over time, without having to do any redirects.— John (@JohnMu) April 15, 2019 Literally only yesterday did Google begin supporting instant loading of self-hosted AMP pages. China has a different set of tech leaders than the United States. Baidu, Alibaba, Tencent (BAT) instead of Facebook, Amazon, Apple, Netflix, Google (FANG). China tech companies may have won their domestic markets in part based on superior technology or better knowledge of the local culture, though those same companies have largely went nowhere fast in most foreign markets. A big part of winning was governmental assistance in putting a foot on the scales. Part of the US-China trade war is about who controls the virtual “seas” upon which value flows: it can easily be argued that the last 60 years were above all the era of the container-ship (with container-ships getting ever bigger). But will the coming decades still be the age of the container-ship? Possibly not, for the simple reason that things that have value increasingly no longer travel by ship, but instead by fiberoptic cables! … you could almost argue that ZTE and Huawei have been the “East India Company” of the current imperial cycle. Unsurprisingly, it is these very companies, charged with laying out the “new roads” along which “tomorrow’s value” will flow, that find themselves at the center of the US backlash. … if the symbol of British domination was the steamship, and the symbol of American strength was the Boeing 747, it seems increasingly clear that the question of the future will be whether tomorrow’s telecom switches and routers are produced by Huawei or Cisco. … US attempts to take down Huawei and ZTE can be seen as the existing empire’s attempt to prevent the ascent of a new imperial power. With this in mind, I could go a step further and suggest that perhaps the Huawei crisis is this century’s version of Suez crisis. No wonder markets have been falling ever since the arrest of the Huawei CFO. In time, the Suez Crisis was brought to a halt by US threats to destroy the value of sterling. Could we now witness the same for the US dollar? China maintains Huawei is an employee-owned company. But that proposition is suspect. Broadly stealing technology is vital to the growth of the Chinese economy & they have no incentive to stop unless their leading companies pay a direct cost. Meanwhile, China is investigating Ericsson over licensing technology. India has taken notice of the success of Chinese tech companies & thus began to promote “national champion” company policies. That, in turn, has also meant some of the Chinese-styled laws requiring localized data, antitrust inquiries, foreign ownership restrictions, requirements for platforms to not sell their own goods, promoting limits on data encryption, etc. The secretary of India’s Telecommunications Department, Aruna Sundararajan, last week told a gathering of Indian startups in a closed-door meeting in the tech hub of Bangalore that the government will introduce a “national champion” policy “very soon” to encourage the rise of Indian companies, according to a person familiar with the matter. She said Indian policy makers had noted the success of China’s internet giants, Alibaba Group Holding Ltd. and Tencent Holdings Ltd. … Tensions began rising last year, when New Delhi decided to create a clearer set of rules for e-commerce and convened a group of local players to solicit suggestions. Amazon and Flipkart, even though they make up more than half the market, weren’t invited, according to people familiar with the matter. Amazon vowed to invest $5 billion in India & they have done some remarkable work on logistics there. Walmart acquired Flipkart for $16 billion. Other emerging markets also have many local ecommerce leaders like Jumia, MercadoLibre, OLX, Gumtree, Takealot, Konga, Kilimall, BidOrBuy, Tokopedia, Bukalapak, Shoppee, Lazada. If you live in the US you may have never heard of *any* of those companies. And if you live in an emerging market you may have never interacted with Amazon or eBay. It makes sense that ecommerce leadership would be more localized since it requires moving things in the physical economy, dealing with local currencies, managing inventory, shipping goods, etc. whereas information flows are just bits floating on a fiber optic cable. If the Internet is primarily seen as a communications platform it is easy for people in some emerging markets to think Facebook is the Internet. Free communication with friends and family members is a compelling offer & as the cost of data drops web usage increases. At the same time, the web is incredibly deflationary. Every free form of entertainment which consumes time is time that is not spent consuming something else. Add the technological disruption to the wealth polarization that happened in the wake of the great recession, then combine that with algorithms that promote extremist views & it is clearly causing increasing conflict. If you are a parent and you think you child has no shot at a brighter future than your own life it is easy to be full of rage. Empathy can radicalize otherwise normal people by giving them a more polarized view of the world: Starting around 2000, the line starts to slide. More students say it’s not their problem to help people in trouble, not their job to see the world from someone else’s perspective. By 2009, on all the standard measures, Konrath found, young people on average measure 40 percent less empathetic than my own generation … The new rule for empathy seems to be: reserve it, not for your “enemies,” but for the people you believe are hurt, or you have decided need it the most. Empathy, but just for your own team. And empathizing with the other team? That’s practically a taboo. A complete lack of empathy could allow a psychopath (hi Chris!) to commit extreme crimes while feeling no guilt, shame or remorse. Extreme empathy can have the same sort of outcome: “Sometimes we commit atrocities not out of a failure of empathy but rather as a direct consequence of successful, even overly successful, empathy. … They emphasized that students would learn both sides, and the atrocities committed by one side or the other were always put into context. Students learned this curriculum, but follow-up studies showed that this new generation was more polarized than the one before. … [Empathy] can be good when it leads to good action, but it can have downsides. For example, if you want the victims to say ‘thank you.’ You may even want to keep the people you help in that position of inferior victim because it can sustain your feeling of being a hero.” - Fritz Breithaupt News feeds will be read. Villages will be razed. Lynch mobs will become commonplace. Many people will end up murdered by algorithmically generated empathy. As technology increases absentee ownership & financial leverage, a society led by morally agnostic algorithms is not going to become more egalitarian. The more I think about and discuss it, the more I think WhatsApp is simultaneously the future of Facebook, and the most potentially dangerous digital tool yet created. We haven’t even begun to see the real impact yet of ubiquitous, unfettered and un-moderatable human telepathy.— Antonio García Martínez (@antoniogm) April 15, 2019 When politicians throw fuel on the fire it only gets worse: It’s particularly odd that the government is demanding “accountability and responsibility” from a phone app when some ruling party politicians are busy spreading divisive fake news. How can the government ask WhatsApp to control mobs when those convicted of lynching Muslims have been greeted, garlanded and fed sweets by some of the most progressive and cosmopolitan members of Modi’s council of ministers? Mark Zuckerburg won’t get caught downstream from platform blowback as he spends $20 million a year on his security. The web is a mirror. Engagement-based algorithms reinforcing our perceptions & identities. And every important story has at least 2 sides! The Rohingya asylum seekers are victims of their own violent Jihadist leadership that formed a militia to kill Buddhists and Hindus. Hindus are being massacred, where’s the outrage for them!? https://t.co/P3m6w4B1Po— Imam Tawhidi (@Imamofpeace) May 23, 2018 Some may “learn” vaccines don’t work. Others may learn the vaccines their own children took did not work, as it failed to protect them from the antivax content spread by Facebook & Google, absorbed by people spreading measles & Medieval diseases. Passion drives engagement, which drives algorithmic distribution: “There’s an asymmetry of passion at work. Which is to say, there’s very little counter-content to surface because it simply doesn’t occur to regular people (or, in this case, actual medical experts) that there’s a need to produce counter-content.” As the costs of “free” become harder to hide, social media companies which currently sell emerging markets as their next big growth area will end up having embedded regulatory compliance costs which will end up exceeding any sort of prospective revenue they could hope to generate. The Pinterest S1 shows almost all their growth is in emerging markets, yet almost all their revenue is inside the United States. As governments around the world see the real-world cost of the foreign tech companies & view some of them as piggy banks, eventually the likes of Facebook or Google will pull out of a variety of markets they no longer feel worth serving. It will be like Google did in mainland China with search after discovering pervasive hacking of activist Gmail accounts. Just tried signing into Gmail from a new device. Unless I provide a phone number, there is no way to sign in and no one to call about it. Oh, and why do they say they need my phone? If you guessed “for my protection,” you would be correct. Talk about Big Brother…— Simon Mikhailovich (@S_Mikhailovich) April 16, 2019 Lower friction & lower cost information markets will face more junk fees, hurdles & even some legitimate regulations. Information markets will start to behave more like physical goods markets. The tech companies presume they will be able to use satellites, drones & balloons to beam in Internet while avoiding messy local issues tied to real world infrastructure, but when a local wealthy player is betting against them they’ll probably end up losing those markets: “One of the biggest cheerleaders for the new rules was Reliance Jio, a fast-growing mobile phone company controlled by Mukesh Ambani, India’s richest industrialist. Mr. Ambani, an ally of Mr. Modi, has made no secret of his plans to turn Reliance Jio into an all-purpose information service that offers streaming video and music, messaging, money transfer, online shopping, and home broadband services.” Publishers do not have “their mojo back” because the tech companies have been so good to them, but rather because the tech companies have been so aggressive that they’ve earned so much blowback which will in turn lead publishers to opting out of future deals, which will eventually lead more people back to the trusted brands of yesterday. Publishers feeling guilty about taking advertorial money from the tech companies to spread their propaganda will offset its publication with opinion pieces pointing in the other direction: “This is a lobbying campaign in which buying the good opinion of news brands is clearly important. If it was about reaching a target audience, there are plenty of metrics to suggest his words would reach further – at no cost – on Facebook. Similarly, Google is upping its presence in a less obvious manner via assorted media initiatives on both sides of the Atlantic. Its more direct approach to funding journalism seems to have the desired effect of making all media organisations (and indeed many academic institutions) touched by its money slightly less questioning and critical of its motives.” When Facebook goes down direct visits to leading news brand sites go up. When Google penalizes a no-name me-too site almost nobody realizes it is missing. But if a big publisher opts out of the ecosystem people will notice. The reliance on the tech platforms is largely a mirage. If enough key players were to opt out at the same time people would quickly reorient their information consumption habits. If the platforms can change their focus overnight then why can’t publishers band together & choose to dump them? CEO Jack Dorsey said Twitter is looking to change the focus from following specific individuals to topics of interest, acknowledging that what’s incentivized today on the platform is at odds with the goal of healthy dialoguehttps://t.co/31FYslbePA— Axios (@axios) April 16, 2019 In Europe there is GDPR, which aimed to protect user privacy, but ultimately acted as a tax on innovation by local startups while being a subsidy to the big online ad networks. They also have Article 11 & Article 13, which passed in spite of Google’s best efforts on the scaremongering anti-SERP tests, lobbying & propaganda fronts: “Google has sparked criticism by encouraging news publishers participating in its Digital News Initiative to lobby against proposed changes to EU copyright law at a time when the beleaguered sector is increasingly turning to the search giant for help.” Remember the Eric Schmidt comment about how brands are how you sort out (the non-YouTube portion of) the cesspool? As it turns out, he was allegedly wrong as Google claims they have been fighting for the little guy the whole time: Article 11 could change that principle and require online services to strike commercial deals with publishers to show hyperlinks and short snippets of news. This means that search engines, news aggregators, apps, and platforms would have to put commercial licences in place, and make decisions about which content to include on the basis of those licensing agreements and which to leave out. Effectively, companies like Google will be put in the position of picking winners and losers. … Why are large influential companies constraining how new and small publishers operate? … The proposed rules will undoubtedly hurt diversity of voices, with large publishers setting business models for the whole industry. This will not benefit all equally. … We believe the information we show should be based on quality, not on payment. Facebook claims there is a local news problem: “Facebook Inc. has been looking to boost its local-news offerings since a 2017 survey showed most of its users were clamoring for more. It has run into a problem: There simply isn’t enough local news in vast swaths of the country. … more than one in five newspapers have closed in the past decade and a half, leaving half the counties in the nation with just one newspaper, and 200 counties with no newspaper at all.” Google is so for the little guy that for their local news experiments they’ve partnered with a private equity backed newspaper roll up firm & another newspaper chain which did overpriced acquisitions & is trying to act like a PE firm (trying to not get eaten by the PE firm). Does the above stock chart look in any way healthy? Does it give off the scent of a firm that understood the impact of digital & rode it to new heights? If you want good market-based outcomes, why not partner with journalists directly versus operating through PE chop shops? If Patch is profitable & Google were a neutral ranking system based on quality, couldn’t Google partner with journalists directly? Throwing a few dollars at a PE firm in some nebulous partnership sure beats the sort of regulations coming out of the EU. And the EU’s regulations (and prior link tax attempts) are in addition to the three multi billion Euro fines the European Union has levied against Alphabet for shopping search, Android & AdSense. Google was also fined in Russia over Android bundling. The fine was tiny, but after consumers gained a search engine choice screen (much like Google pushed for in Europe on Microsoft years ago) Yandex’s share of mobile search grew quickly. The UK recently published a white paper on online harms. In some ways it is a regulation just like the tech companies might offer to participants in their ecosystems: Companies will have to fulfil their new legal duties or face the consequences and “will still need to be compliant with the overarching duty of care even where a specific code does not exist, for example assessing and responding to the risk associated with emerging harms or technology”. If web publishers should monitor inbound links to look for anything suspicious then the big platforms sure as hell have the resources & profit margins to monitor behavior on their own websites. Australia passed the Sharing of Abhorrent Violent Material bill which requires platforms to expeditiously remove violent videos & notify the Australian police about them. There are other layers of fracturing going on in the web as well. Programmatic advertising shifted revenue from publishers to adtech companies & the largest ad sellers. Ad blockers further lower the ad revenues of many publishers. If you routinely use an ad blocker, try surfing the web for a while without one & you will notice layover welcome AdSense ads on sites as you browse the web - the very type of ad they were allegedly against when promoting AMP. There has been much more press in the past week about ad blocking as Google’s influence is being questioned as it rolls out ad blocking as a feature built into Google’s dominant Chrome web browser. https://t.co/LQmvJu9MYB— Jason Kint (@jason_kint) February 19, 2018 Tracking protection in browsers & ad blocking features built directly into browsers leave publishers more uncertain. And who even knows who visited an AMP page hosted on a third party server, particularly when things like GDPR are mixed in? Those who lack first party data may end up having to make large acquisitions to stay relevant. Voice search & personal assistants are now ad channels. Google Assistant Now Showing Sponsored Link Ads for Some Travel Related Queries “Similar results are delivered through both Google Home and Google Home Hub without the sponsored links.” https://t.co/jSVKKI2AYT via @bretkinsella pic.twitter.com/0sjAswy14M— Glenn Gabe (@glenngabe) April 15, 2019 App stores are removing VPNs in China, removing Tiktok in India, and keeping female tracking apps in Saudi Arabia. App stores are centralized chokepoints for governments. Every centralized service is at risk of censorship. Web browsers from key state-connected players can also censor messages spread by developers on platforms like GitHub. Microsoft’s newest Edge web browser is based on Chromium, the source of Google Chrome. While Mozilla Firefox gets most of their revenue from a search deal with Google, Google has still went out of its way to use its services to both promote Chrome with pop overs AND break in competing web browsers: “All of this is stuff you’re allowed to do to compete, of course. But we were still a search partner, so we’d say ‘hey what gives?’ And every time, they’d say, ‘oops. That was accidental. We’ll fix it in the next push in 2 weeks.’ Over and over. Oops. Another accident. We’ll fix it soon. We want the same things. We’re on the same team. There were dozens of oopses. Hundreds maybe?” - former Firefox VP Jonathan Nightingale This is how it spreads. Google normalizes “web apps” that are really just Chrome apps. Then others follow. We’ve been here before, y’all. Remember IE? Browser hegemony is not a happy place. https://t.co/b29EvIty1H— DHH (@dhh) April 1, 2019 In fact, it’s alarming how much of Microsoft’s cut-off-the-air-supply playbook on browser dominance that Google is emulating. From browser-specific apps to embrace-n-extend AMP “standards”. It’s sad, but sadder still is when others follow suit.— DHH (@dhh) April 1, 2019 YouTube page load is 5x slower in Firefox and Edge than in Chrome because YouTube’s Polymer redesign relies on the deprecated Shadow DOM v0 API only implemented in Chrome. You can restore YouTube’s faster pre-Polymer design with this Firefox extension: https://t.co/F5uEn3iMLR— Chris Peterson (@cpeterso) July 24, 2018 As phone sales fall & app downloads stall a hardware company like Apple is pushing hard into services while quietly raking in utterly fantastic ad revenues from search & ads in their app store. Part of the reason people are downloading fewer apps is so many apps require registration as soon as they are opened, or only let a user engage with them for seconds before pushing aggressive upsells. And then many apps which were formerly one-off purchases are becoming subscription plays. As traffic acquisition costs have jumped, many apps must engage in sleight of hand behaviors (free but not really, we are collecting data totally unrelated to the purpose of our app & oops we sold your data, etc.) in order to get the numbers to back out. This in turn causes app stores to slow down app reviews. Apple acquired the news subscription service Texture & turned it into Apple News Plus. Not only is Apple keeping half the subscription revenues, but soon the service will only work for people using Apple devices, leaving nearly 100,000 other subscribers out in the cold: “if you’re part of the 30% who used Texture to get your favorite magazines digitally on Android or Windows devices, you will soon be out of luck. Only Apple iOS devices will be able to access the 300 magazines available from publishers. At the time of the sale in March 2018 to Apple, Texture had about 240,000 subscribers.” Apple is also going to spend over a half-billion Dollars exclusively licensing independently developed games: Several people involved in the project’s development say Apple is spending several million dollars each on most of the more than 100 games that have been selected to launch on Arcade, with its total budget likely to exceed $500m. The games service is expected to launch later this year. … Apple is offering developers an extra incentive if they agree for their game to only be available on Arcade, withholding their release on Google’s Play app store for Android smartphones or other subscription gaming bundles such as Microsoft’s Xbox game pass. Verizon wants to launch a video game streaming service. It will probably be almost as successful as their Go90 OTT service was. Microsoft is pushing to make Xbox games work on Android devices. Amazon is developing a game streaming service to compliment Twitch. The hosts on Twitch, some of whom sign up exclusively with the platform in order to gain access to its moneymaking tools, are rewarded for their ability to make a connection with viewers as much as they are for their gaming prowess. Viewers who pay $4.99 a month for a basic subscription — the money is split evenly between the streamers and Twitch — are looking for immediacy and intimacy. While some hosts at YouTube Gaming offer a similar experience, they have struggled to build audiences as large, and as dedicated, as those on Twitch. … While YouTube has made millionaires out of the creators of popular videos through its advertising program, Twitch’s hosts make money primarily from subscribers and one-off donations or tips. YouTube Gaming has made it possible for viewers to support hosts this way, but paying audiences haven’t materialized at the scale they have on Twitch. Google, having a bit of Twitch envy, is also launching a video game streaming service which will be deeply integrated into YouTube: “With Stadia, YouTube watchers can press “Play now” at the end of a video, and be brought into the game within 5 seconds. The service provides “instant access” via button or link, just like any other piece of content on the web.” Google will also launch their own game studio making exclusive games for their platform. When consoles don’t use discs or cartridges so they can sell a subscription access to their software library it is hard to be a game retailer! GameStop’s stock has been performing like an ICO. And these sorts of announcements from the tech companies have been hitting stock prices for companies like Nintendo & Sony: “There is no doubt this service makes life even more difficult for established platforms,” Amir Anvarzadeh, a market strategist at Asymmetric Advisors Pte, said in a note to clients. “Google will help further fragment the gaming market which is already coming under pressure by big games which have adopted the mobile gaming business model of giving the titles away for free in hope of generating in-game content sales.” The big tech companies which promoted everything in adjacent markets being free are now erecting paywalls for themselves, balkanizing the web by paying for exclusives to drive their bundled subscriptions. How many paid movie streaming services will the web have by the end of next year? 20? 50? Does anybody know? Disney alone with operate Disney+, ESPN+ as well as Hulu. And then the tech companies are not only licensing exclusives to drive their subscription-based services, but we’re going to see more exclusionary policies like YouTube not working on Amazon Echo, Netflix dumping support for Apple’s Airplay, or Amazon refusing to sell devices like Chromecast or Apple TV. The good news in a fractured web is a broader publishing industry that contains many micro markets will have many opportunities embedded in it. A Facebook pivot away from games toward news, or a pivot away from news toward video won’t kill third party publishers who have a more diverse traffic profile and more direct revenues. And a regional law blocking porn or gambling websites might lead to an increase in demand for VPNs or free to play points-based games with paid upgrades. Even the rise of metered paywalls will lead to people using more web browsers & more VPNs. Each fracture (good or bad) will create more market edges & ultimately more opportunities. Chinese enforcement of their gambling laws created a real estate boom in Manila. So long as there are 4 or 5 game stores, 4 or 5 movie streaming sites, etc. … they have to compete on merit or use money to try to buy exclusives. Either way is better than the old monopoly strategy of take it or leave it ultimatums. The publisher wins because there is a competitive bid. There won’t be an arbitrary 30% tax on everything. So long as there is competition from the open web there will be means to bypass the junk fees & the most successful companies that do so might create their own stores with a lower rate: “Mr. Schachter estimates that Apple and Google could see a hit of about 14% to pretax earnings if they reduced their own app commissions to match Epic’s take.” As the big media companies & big tech companies race to create subscription products they’ll spend many billions on exclusives. And they will be training consumers that there’s nothing wrong with paying for content. This will eventually lead to hundreds of thousands or even millions of successful niche publications which have incentives better aligned than all the issues the ad supported web has faced. Categories: publishing & media from SEO Book http://www.seobook.com/fractured via IFTTT from Local SEO Guru http://localseoguru.tumblr.com/post/184254147558 via IFTTT from Tomeu Capella https://tomeucapella.tumblr.com/post/184254614795 via IFTTT
from Tumblr https://eduardoromerorest.tumblr.com/post/184370855411/the-fractured-web
via IFTTT

Hacking Fitness vía Garmin Connect [Parte 1 de 2] #Garmin #Fitness

Garmin Connect es una plataforma para deportistas que utilizan dispositivos de la marca Garmin para monitorizar en tiempo real, gracias al sistema GPS, variables importantes en la práctica del deporte como velocidad, metros de desnivel, posicionamiento dentro de un mapa, ritmo cardiaco, creación de historiales de recorridos e incluso crear pequeñas comunidades, donde los usuarios definen segmentos y utilizan gamificación para competir dentro del segmento y ver quién marca el mejor tiempo. Figura 1: Hacking Fitness vía Garmin Connect [Parte 1 de 2] Para compartir la información con otro usuarios, basta instalar la app en el smartphone y vincular éste con el dispositivo Garmin a través de Bluetooth, crear una cuenta gratuita en la plataforma Garmin Connect y vincular la cuenta de correo electrónico utilizada para la creación de la cuenta en el portal web en la app del smartphone. Una plataforma que, antes de almacenar los datos personales de cada usuario, llama la atención para hacer algo de “Hacking con Buscadores” y conocer cuál es su robustez. Figura 2: Hacking con Buscadores. Google, Bing, Shodan & Robtex Como hemos visto anteriormente en el pasado, en plataformas como Endomondo (Róbame, que estoy así de sano y estoy haciendo deporte) o Runtastic (Otra red social de deportistas que publican su ubicación y su estado de salud) , si los usuarios no han tomado las adecuadas protecciones, si la plataforma no ha tomado las suficientes medidas para evitar los info-leaks y si el servicio web no ha configurado correctamente las opciones de información, la privacidad de los usuarios podría verse afectada, y esto es lo que vamos a ver hoy. Figura 4: Proyecto de ElevenPaths sobre info-leaks en webs de deportistas En el pasado, el ejercito militar americano, tuvo que prohibir el uso de dispositivos y servicios como Strava, porque los datos que subían sus soldados pudo revelar la ubicación de bases secretas, como vimos en el artículo “¿Los datos de Strava delatan a los militares de USA?” Análisis de Fichero robots.txt en Garmin Connect Analizamos en la plataforma la existencia del fichero robots.txt utilizado para impedir a los motores de búsqueda la indexación de cierto contenido web. Observamos que no existe, así que la probabilidad de que los motores de búsqueda hayan indexado información web del sitio, como, por ejemplo, datos de las cuentas de los usuarios relacionados con su actividad física es elevada. Figura 5: No existe el fichero robots.txt en la web del servicio Garmin Connect Ya hemos visto en el pasado que el tener un fichero robots.txt no es una garantía total, y que incluso se podría convertir en una fuga de información en sí mismo, pero bien configurado ayuda a evitar problemas de info-leaks. Y en la web de Garmin Connect no existe. Figura 6: Robots.txt en Garmin Connect not found Como curiosidad, al realizar la petición del recurso “robots.txt” al nombre de dominio principal, observamos que sí que existe, aunque “de aquella manera”, porque no ha sido configurado siguiendo buenas prácticas. No Figura 7: Fichero robots.txt para el nombre del dominio principal Además, no es posible obtener información interesante a partir de las rutas relativas de recursos almacenadas en el fichero “robots.txt”. No obstante, hay que recordar que el sitio web podría hacer uso de Headers HTTP X-Robots-Tags “NoIndex” o de etiquetas HTML META NoIndex en páginas web para evitar la indexación, así que la prueba del nueve es comprobar cuántas URLs de perfiles de usuarios de Garmin Connect se han quedado indexadas en los buscadores. Búsqueda de URLs de actividades deportivas de usuarios Una vez dentro de la plataforma, en la zona de actividades del usuario, se observa en la URL un posible patrón común para todas las actividades registradas de los usuarios de la plataforma: “modern/activity” Figura 8: URL con la información de una ruta en bicicleta de Amador Aparicio (@amadapa) Haciendo, como hemos dicho al principio, un poco de “Hacking con Buscadores” se observa como Google tiene indexados casi 100.000 resultados relacionados con la actividad de los usuarios de la plataforma, lo que es una auténtica salvajada. Y desde el punto de vista de negocio de Garmin Connect extraño, ya que está entregando los datos de todos sus usuarios a Google. Figura 9: Resultados indexados en Google de usuarios de Garmin Connect Con una sencilla consulta, se determina que es posible acceder a la información de las actividades usuarios de la plataforma sin la necesidad de tener una cuenta en ella, seguramente porque la cuenta no cuente con la configuración de privacidad adecuada o porque los usuarios quieran compartir esta información con el resto de usuarios de Internet. Figura 10: Información de la actividad deportiva de un usuario junto con el dispositivo Garmin utilizado. Además, para cada actividad pública, es posible conocer el dispositivo Garmin que registró y volcó la información deportiva en cada una de las actividades, junto con la versión de software que tenía en ese momento. De nuevo, un info-leak de un dispositivo igual que el sistema de recuperación de contraseñas de Google, lo que permite a una empresa tipo Cambridge Analytica realizar una mejor base de datos de las personas a atacar en campañas de Fake News. Autor: Amador Aparicio de la Fuente (@amadapa), escritor de libro “Hacking Web Technologies” ****************************************************************************************************** - Hacking Fitness vía Garmin Connect [Parte 1 de 2] - Hacking Fitness vía Garmin Connect [Parte 2 de 2] ****************************************************************************************************** Sigue Un informático en el lado del mal - Google+ RSS 0xWord
from Tumblr http://eduardoromerorest.tumblr.com/post/184358272826/hacking-fitness-v%C3%ADa-garmin-connect-parte-1-de-2
via IFTTT

Unas charlas: Navarra Lan Party sobre Datos, CodeTalk sobre cómo entrenar AI y unos minutos de la charla sobre la lengua

Para hoy domingo, os dejo una charla que di en una conferencia en la Navarra Lan Party 2018 en Pamplona, una webinar que hicieron mis compañeros sobre Cómo entrenar inteligencias artificiales con OpenAI Gym y un pequeño corte de solo unos minutos - aún no se ha publicado la charla completa - de la charla que di en el VIII Congreso Internacional de La Lengua Española que tuvo lugar en Córdoba (Argentina). Figura 1: Unas charlas: Navarra Lan Party sobre Datos, CodeTalk sobre cómo entrenar AI y unos minutos de la charla sobre la lengua La primera de las charlas es la que di en la Navarra Lan Party 2018, invitado por el Instituto Cuatro Vientos de Pamplona con el que tengo una estrecha relación desde hace años, fui a firmar unos libros de 0xWord y a dar una charla sobre el mundo de los datos y, en especial, sobre el tema de Cambridge Analytica y cómo los info-leaks de datos puede utilizarse para crear grandes entornos de Big Data que permita cluseterizar bien los objetivos a ser atacados por Fake News. View this post on Instagram Haciendo dibujitos en los libros de 0xWord en la Navarra Lan Party }:)A post shared by Chema Alonso (@chemaalonso) on Sep 14, 2018 at 10:45am PDT Este es un tema del que he hablado en otras conferencias, pero no había quedado reflejado en muchas de ellas, así que aproveché que volvía a mi querida Pamplona y que se iba a grabar la charla en un entorno ameno y cercano con estudiantes y amantes de la tecnología para hacerla. Figura 3: “Tus datos mueven el mundo y tú no lo sabes” en Navarra Lan Party 2018 La segunda de las charlas es a cargo de mi equipo de Ideas Locas - ya sabéis, esos locos que han estado entrenando Inteligencias Artificiales para que se conviertan en Chema Alonso - que explicaron en una de las CodeTalks for Developers de ElevenPaths “Cómo entrenar una Inteligencia Artificial con OpenAI Gym”, para que los developers, developers, developers podáis sacarle provecho al máximo. Figura 4: Charla en la RootedCON 2019 usando una AI para suplantarme en vídeos Y la charla la grabaron en vídeo durante esta Semana Santa, y la tienes aquí mismo, subida a Youtube para que no te pierdas nada de cómo sacar provecho a frameworks como OpenAI Gym. Recomendación extra, aprende mucho Python [Python para Pentesters, Hacking con Python] que por aquí lo usamos mucho para estas cosas. Figura 5: CodeTalk for Developers: Cómo entrenar tu AI con OpenAI Gym Y la última son solo unos minutos de la charla que dimos en el VIII Congreso Internacional de la Lengua Española en Córdoba (Argentina), son solo unas demos y algunas explicaciones, que tienen que ver con la visión que os conté tiempo atrás con la inocentada de que a mí me daban un taburete de la RAE, que aunque fuera un día para hacer bromas, muchas de las cosas que decía en el artículo realmente las pensaba. View this post on Instagram Entrando ayer en el VIII Congreso Internacional de la Lengua Española. Curiosa foto en la que los tés llevamos gorro }:)A post shared by Chema Alonso (@chemaalonso) on Mar 28, 2019 at 12:41am PDT Al final, de lo que se trata es de que las herramientas tecnológicas de generación de textos, interpretación de la lengua, y lo que es más importante, asistentes digitales, e inteligencias artificiales que se creen en el futuro, traten con cariño nuestra lengua. Algo que es importante más, cuando estamos metiendo sentimiento a las AI basados en la interpretación de la lengua. View this post on Instagram Sobre la cercenación del lenguaje mediante el marcado de términos correctos como incorrectos en los correctores ortográficos de las herramientas tecnológicas. #CILEA post shared by Chema Alonso (@chemaalonso) on Apr 14, 2019 at 2:38am PDT Ya os dejé este fragmento de un minuto que publiqué en mi Instagram, pero ahora he conseguido esta otra grabación en la que se puede ver - más o menos - la parte que hice en el congreso. Como os digo, solo unos minutos. Figura 8: Charla de Chema Alonso en el VIII CILE Y eso es todo, tres charlas para que pases este domingo antes de volver al trabajo el lunes tranquilo y calentito en casa. Yo hoy me voy a terminar mi colección de cromos de fútbol con Mi Hacker, que lo que se empieza… se termina. Saludos Malignos! Sigue Un informático en el lado del mal - Google+ RSS 0xWord
from Tumblr http://eduardoromerorest.tumblr.com/post/184334753286/unas-charlas-navarra-lan-party-sobre-datos
via IFTTT

Y después de Semana Santa: Eventos, Cursos y Charlas en Madrid, Cartagena de Índias, Málaga, Sevilla y Online. @elevenpaths @luca_d3 @0xWord

Es sábado, y la semana que viene ya toca volver al trabajo. Así que yo vuelvo a la rutina de traeros la lista de eventos, charlas, cursos y saraos varios a los que puedes apuntarte para la semana que viene. Estos son los que tengo en el radar de lo que vamos a hacer nosotros. Toma nota que son un buen montón y en Madrid, Colombia, Málaga, Sevilla, Melilla y Online. Figura 1: Y después de Semana Santa: Eventos, Cursos y Charlas en Madrid, Cartagena de Índias, Málaga, Sevilla y Online. Lo primero que tenemos es un taller de Introducción a la Seguridad de la Información que se va a realizar los días 23 y 24 de Abril en el Centro Tecnológico de Melilla, donde participaremos desde ElevenPaths. Una oportunidad para estar en contacto con nuestros compañeros si eres de Melilla. La próxima semana, dentro del programa de formación sobre #ciberseguridad de @MSecureTIC, apoyado por @telefonica_ed, estaremos impartiendo el curso “Introducción a la Seguridad de la Información”. Toda la info aquí 👇👇 https://t.co/xMHTwZoZPd— ElevenPaths (@ElevenPaths) 17 de abril de 2019 23, 24 y 25 de Abril: XXX Securmática [Madrid] Durante los días 23 a 25 de Abril tendrá lugar en Madrid la edición número 30 del foro de CISOs por excelencia en España: Securmática. En este evento, nuestro compañero Pedro Pablo Pérez, CEO de ElevenPaths, dará una ponencia en la jornada inaugural junto con nuestro compañero Hugo de los Santos, director de la unidad de Cloud. Tienes la agenda completa en la web del evento. Figura 3: XXX Congreso de Securmática en Madrid 24 de Abril: Mundo Hacker Day [Madrid] En este evento de un día completo de duración tienes una agenda de grandes ponentes que debes revisar en la web del evento. En este evento participaremos desde ElevenPaths con dos charlas de nuestros compañeros Carmen Torrano, Product Manager de IoT Security - y Deepak Daswani, Ciber-Security Ambassador. Figura 4: Mundo Hacker Day en Madrid Nuestra compañera Carmen Torrano se centrará en “El nuevo Petroleo: Los Datos” donde hablará de cómo se pueden utilizar estos datos con complejos algoritmos de Machine Learning para crear modernas soluciones de Ciberseguridad. Como sabéis, Carmen es una de las autoras del libro de “Machine Learning Aplicado a Ciberseguridad” que recientemente hemos publicado en 0xWord. Figura 5: Libro de Machine Learning Aplicado a Cibersegurdiad Por otro lado, nuestro compañero Deepak Daswani hablará de cómo explotar los leaks que se han ido descubriendo de la aplicación de WhatsApp Web para poder extraer información de personas a través del servicio WhatsApp. 25 de Abril: ElevenPaths Security Innovation Day Andalucía [Málaga] El evento anual en ciberseguridad de ElevenPaths llega a Andalucía.Presentamos la I Edición del Security Innovation Day Andalucía, un evento de referencia en el mundo de la ciberseguridad dentro del territorio sur y organizado por ElevenPaths, la unidad de ciberseguridad de Telefónica. En nuestro mundo, la seguridad es infinita. En ElevenPaths queremos llegar lo más lejos posible en cada desafío. Por eso desarrollamos innovación para hacer frente a amenazas, ataques y, por supuesto, proteger a nuestros aliados. Figura 6: Security Innovation Day Andalucía Security Innovation Day Andalucía es nuestro evento del año sobre innovación en ciberseguridad orientado a profesionales de la seguridad de la información en el sur de España. Cuenta con ponentes de referencia, innovación y la presentación de nuestras principales y futuras líneas estratégicas. Figura 7: Agenda del Security Innovation Day Andalucía Hoy en día estamos expuestos a sufrir ataques cada vez más sofisticados y frecuentes que ponen en peligro nuestro negocio, reputación, privacidad y confianza. Por eso, necesitamos ser cada vez más receptivos a las medidas de ciberseguridad y redefinir nuestra estrategia hacia la ciber-resiliencia. El mundo digital abre posibilidades infinitas, tanto a personas como a empresas. Por ello, en ElevenPaths creamos innovación disruptiva en ciberseguridad con el fin de aportar la privacidad y confianza que nuestra vida digital necesita. 25 de Abril: Girls Get Tech [Madrid] Este día en Madrid, en las instalaciones de Google Campus, habrá un evento de mujeres en las que habrá conferencias y talleres de mujeres de éxito. Entre ellas, estará nuestra compañera Yaiza Rubio para dar una sesión llamada Girls Get Safe. Al evento os podéis apuntar ya en la web de registro. Figura 8: Girls Get Tech en Madrid 25 de Abril: Hacking Ético [Online] Este curso te proporciona los conocimientos necesarios a nivel conceptual y práctico para que puedas implementar en empresas y negocios, un sistema integral de seguridad informática integral y perimetral, apoyado por el uso de Software Libre. Desarrollarás y adquirirás habilidades prácticas para la realización de auditorías de sistemas, usando las técnicas de la auditoria de T.I. del tipo “Hacking Ético y/o Test de Penetración”. Figura 9: Curso Online de Hacking Ético Conocerás los diferentes tipos de atacantes, así como a usar las diferentes técnicas y herramientas de intrusión utilizadas por los delincuentes informáticos para lograr violentar la seguridad de un sistema de información. Con este curso, podrás realizar sin problemas auditorías de pentesting con su correspondiente informe profesional, además de conocer los métodos utilizados por los delincuentes cibernéticos para poder contrarrestar sus ataques. Tienes todos los detalles en la web de este Curso Online de Hacking Ético. Este curso se ha definido con un 75% de práctica y un 25% de teoría, lo que te facilitará mucho el aprendizaje y el aprovechamiento máximo de conocimientos. Ayuda a orientar las auditorias de instrusión haciendo uso de las normas y buenas prácticas en seguridad de la información a nivel internacional y permite aprender las técnicas de ataque y protección de las redes inalámbricas y las aplicaciones web dinámicas. El objetivo final es formar auditores técnicos e integrales en seguridad informática. Figura 10: Libros de Metasploit para Pentesters y Ethical HackingEste curso entrega a todos los asistentes de forma gratuita los libros de Ethical Hacking y de Metasploit para Pentesters [4ª Edición] de 0xWord, además de que puedes apuntarte a este curso la versión VBook de Ethical Hacking. 26 y 27 de Abril: OSINT City [Sevilla] Durante dos días en Sevilla tendrá lugar este evento centrado en Ciberseguridad en el que participará nuestro compañero Nacho Brihuega, coordinador del equipo de Hacking Ético en nuestra unidad de ElevenPaths Servicios Profesionales. Tienes toda la información en la web del evento. Figura 11: OSINT City 28 y 29 de Abril: UNWTO Tourism Tech Adventure: Scaling Up [Cartagena de Índias] UNWTO Tourism Tech Adventure: Scaling Up es una jornada organizada por el Ministerio de Comercio, Industria y Turismo, ProColombia y la Organización Mundial del Turismo el próximo 29 de abril en Cartagena de Indias (Colombia), con el objetivo de conectar a empresarios y visionarios para explorar las oportunidades de la transformación digital en el sector turístico. El equipo de LUCA participará en el seminario de alto nivel sobre innovación donde se abordará como tema principal el uso de nuevas tecnologías y el impacto de nuevas aplicaciones. Figura 12: UNWTO Tourism Tech Adventure en Colombia Y esto es todo lo que os traigo. Como veis, una vuelta intensa después de Semana Santa para que te conectes rápido con la formación y el trabajo. Saludos Malignos! Sigue Un informático en el lado del mal - Google+ RSS 0xWord
from Tumblr http://eduardoromerorest.tumblr.com/post/184311992836/y-despu%C3%A9s-de-semana-santa-eventos-cursos-y
via IFTTT

ElevenPaths cumple 6 años: 19 de Abril de 2013. Año 1. Día 1. @elevenpaths @informatica64

Aún no se llamaba ElevenPaths. Lo cierto es que no sabíamos cómo, pero llegamos. Era el día 22 de Abril. El 19 de Abril de 2013, viernes, se consumó la constitución de Telefónica Digital Identity & Privacy S.L. y el lunes 22 ya estábamos allí. Y sin saber qué iba a ser de nosotros. Como os dije el año pasado que cumplimos cinco años, los comienzos de ElevenPaths, o mejor dicho, de Telefonica Digital Identity & Privacy, fueron un poco extraños. Una veintena de Outsiders que llegaban al edificio Oeste 3 en el Distrito Telefónica con la idea de hacer cosas grandes en el mundo de la ciberseguridad. Figura 1: ElevenPaths cumple 6 años: 19 de Abril de 2013. Año 1. Día 1. Una vez Palako, que estuvo allí desde del primer día de este proyecto - como estaba en Londres su contrato con Telefónica Digital UK se hizo antes que el del resto por lo que puede presumir de ser “el primer caballero” -, dijo de mí una de las cosas que si has trabajado conmigo seguro que conocerías. Él me conoce muy bien de tantos años juntos. Y lo que dijo es justo lo que hicimos cuando llegamos allí. Yo no sabía dónde teníamos que ir con certeza. Nadie sabe qué deparará el futuro - que se lo digan a los chicos de Google Plus - pero teníamos clara “más o menos” la dirección. View this post on Instagram Foto con Juanlu, ganador del Equinox Otoño 2018, y el gran Palako (CTO de la unidad CDO de Telefónica). Grandes los proyectos presentados presentados por todos los equipos y grande la idea de Juanlu.A post shared by Chema Alonso (@chemaalonso) on Sep 21, 2018 at 11:41am PDT Digamos que, si en un punto dado de tu vida tienes 360 posibilidades para elegir un camino en un plano y muchas más en un mundo esférico, yo suelo elegir aceptablemente bien el cuadrante por el que debo ir, aunque no sepa la dirección exacta, ni mucho menos. Y cuando elijo el cuadrante tiro millas. Rápido. Y después ire aprendiendo y esforzándome al máximo para acercarme a la línea exacta. Pero de momento… al lío. View this post on Instagram Trooper Beers🍺 for Metal Hackers }:) #UpTheIronsA post shared by Chema Alonso (@chemaalonso) on Oct 23, 2018 at 9:39am PDT Aquel día hice lo que Palako dijo cuando yo llegué en el año 2016 al puesto de CDO en una reunión con gente que le preguntó si yo sabía lo que hacía. El bueno de Palako, que me sufre ya muchos años, no solo de compartir cervezotas Troopers y dejarme dormir en su sofá tantas y tantas veces le dijo algo así:“Mira, ten por seguro que Chema Alonso no sabe dónde vamos a llegar en concreto por este camino, pero sabe que tenemos que ir por aquí. Y no te quepa la menor duda de que no se va a parar. Ya uniremos los puntos más adelante, así que mejor que vayamos tirando, que seguro que nos va a ir bien yendo por ahí desde ya.”Y eso hicimos aquel día de Abril que comenzamos en ElevenPaths. Sabía más o menos qué queríamos hacer. Sabíamos más o menos hacia dónde queríamos ir. Innovar, hacer cosas nuevas que nadie hubiera hecho o que nosotros pudiéramos hacer mejor. Hacerlo con gente brillante. Y queríamos hacer algo totalmente nuevo, pero no teníamos mucha idea de qué íbamos a hacer en concreto. Los “Business Cases” perfectos son para otras cosas, no para hacer tecnología del futuro. Así que tiramos millas. Y allí llegamos Rodol y yo, con nuestro equipo de Informática 64 para empezar con el tajo, más los “fichajes estrella”. View this post on Instagram Explicar mi vida sin contar cómo Rodol y yo perseguimos juntos nuestros sueños desde que éramos niños en Móstoles es imposible. Trabajar juntos en la misma planta casi 30 años después de comenzar a pensar en dedicar nuestra vida profesional a la informática es un regalo que la vida me ha hecho.A post shared by Chema Alonso (@chemaalonso) on Jan 17, 2019 at 3:52am PST El primer día nos pusimos unos pocos a montar los equipos, las mesas (sí, las mesas), tirar los cables, poner la red, y colocar las sillas. Otros pocos se pusieron con la FOCA, que yo quería pasarla a Cloud (ya vendría después Pedro Pablo Pérez tiempo después a bautizarla como Faast), otros pocos con Rodol a la cabeza, se pusieron con MetaShield Protector, y los que quedábamos y venían recién llegados a pensar en cómo podíamos hacer aquel Path1 que nunca llegamos a hacer. Era el día uno y nos pusimos ya a hacer cosas. En la dirección de lo que queríamos: Innovar, hacer productos y ciberseguridad. Luego ya cambiaríamos, pivotaríamos, uniríamos puntos hacia atrás y haríamos cosas nuevas. Pero de momento… al lío que el tiempo apremiaba, y yo ya había puesto dos Deadlines: El evento de presentación interna en Telefónica para Junio, y nuestro Primer Security Innovation Day de 2013 donde presentamos Latch, Faast, MetaShield Protector y alguna cosa más de innovación. Ya sabéis cómo me gustan a mí los Deliveries, Deadlines y Difundir. Mientras que se montaban las mesas y repartíamos los sitios de trabajo, Rocío se encargaba de que todo el mundo pudiera entrar con sus tarjetas provisionales, que los contratos nuevos estuvieran firmados, además de explicar a todos que nos llamaríamos como entidad jurídica “Telefónica Digital Identity & Privacy”. Que no se preocuparan por eso de “Sonora algo” que aparecía en su vida laboral. Y es que teníamos tantas ganas de comenzar que en lugar de crear una nueva entidad jurídica en Telefónica reutilizamos una de una startup anterior que se había parado llamada “Sonora no-sé-qué”. Fue curioso tener que explicar a la gente que en su vida laboral no aparecía Telefónica Identity & Privacy y sí “Sonora no-recuerdo-qué-más”. View this post on Instagram Una comida “revival” con los compañeros de Informática 64 que estamos en Telefónica en nuestro querido restaurante chino de todos los viernes. Faltan Pablo González y Richi. Bronxtoles Power!! Es genial compartir planes y sueños de futuro con mis compañeros más viejunos.A post shared by Chema Alonso (@chemaalonso) on Feb 1, 2019 at 5:59am PST Como recuerdo curioso, después de haber presentado en el Security Innovation Day 2013 nuestro trabajo, se me ocurrió hacer una inocentada con la que más hemos disfrutado todos. Me hice unas fotos con el pelo engominado y recogido y llevando traje y corbata. Con esas fotos cambié todas mis redes sociales haciendo creer que me había cortado el pelo y tirado el gorro de rayas a la basura. Y lo publiqué en un post en el el blog con una historia rocambolesca de que me forzaban a ello. Figura 6: Mi perfil de Linkedin el 28 de Diciembre de 2013 Lo mejor fueron los comentarios que me pusieron tanto en el blog como en muchas redes sociales para decirme lo bien que estaba así y lo mal que estaba con la pinta esa del gorro y los pelos. Al final, resultó ser una inocentada y yo seguí con mis pintas, pero después de haber leído muchas cosas. Me quedo de aquel año con muchos recuerdos. Alguno que acabó con los bomberos teniendo que rescatar a un compañero que se jugó el físico con tal de que mi computadora portátil no se rompiera el día del Security Innovation Day, que ese era el nivel de compromiso que teníamos - y seguimos teniendo - con el proyecto. Los Originals Hoy, mirar hacia atrás esos días, con seis años de trabajo a la espalda da alegría. Con muchas cosas de por medio y con muchas aventuras y desventuras da cierto calorcito de buenas sensaciones. No todos los que fueron allí - los que venían de Informática 64 y los que lié para que se metieran en el barco desde el primer día - quedan aún en la casa, aunque sí la mayoría. Aquí con algunos de los “Originals” que aún quedan en la puerta de nuestra vieja casa. View this post on Instagram Con los “Originals” en nuestra vieja casa }:) Rodol se ha currado una camiseta conmemorativa que mola tajo! Bronxtoles Power!A post shared by Chema Alonso (@chemaalonso) on Feb 1, 2019 at 6:45am PST Antonio, Olvido, Palako, siguen a mi lado - en mi comité de CDO de hecho -, otros que entraron un poco después como Pilar, Paloma o Sergio de los Santos siguen al pie del cañón, y aún sigo teniendo mi grupo de Originals del que Rodol y yo somos cabeza, esparciendo un poco de esa forma que teníamos de hacer las cosas nosotros antes de llegar, y el día que llegamos. View this post on Instagram Con mi compañero Antonio Guzman en el MWC 2019… una vez presentado el evento }:)A post shared by Chema Alonso (@chemaalonso) on Mar 11, 2019 at 11:20pm PDT Y otros se nos fueron a otros proyectos. David Barroso o algunos de nuestros compañeros que quisieron hacer otras cosas, y a los que me alegra ver, de vez en cuando, y saber que están disfrutando con su trabajo. Fue un impresionante Año 1 en ElevenPaths y doy gracias por haberlo podido vivir con el grupo de personas que nos juntamos allí. Saludos Malignos! Sigue Un informático en el lado del mal - Google+ RSS 0xWord
from Tumblr http://eduardoromerorest.tumblr.com/post/184287713001/elevenpaths-cumple-6-a%C3%B1os-19-de-abril-de-2013
via IFTTT