Third-party developers don’t always build extensions with security best practices in mind. Now Google is taking steps to better protect user data.
Category: Tech news
hacking,system security,protection against hackers,tech-news,gadgets,gaming
The Slack origin story
Let’s rewind a decade. It’s 2009. Vancouver, Canada.
Stewart Butterfield, known already for his part in building Flickr, a photo-sharing service acquired by Yahoo in 2005, decided to try his hand — again — at building a game. Flickr had been a failed attempt at a game called Game Neverending followed by a big pivot. This time, Butterfield would make it work.
To make his dreams a reality, he joined forces with Flickr’s original chief software architect Cal Henderson, as well as former Flickr employees Eric Costello and Serguei Mourachov, who like himself, had served some time at Yahoo after the acquisition. Together, they would build Tiny Speck, the company behind an artful, non-combat massively multiplayer online game.
Years later, Butterfield would pull off a pivot more massive than his last. Slack, born from the ashes of his fantastical game, would lead a shift toward online productivity tools that fundamentally change the way people work.
Glitch is born

In mid-2009, former TechCrunch reporter-turned-venture-capitalist M.G. Siegler wrote one of the first stories on Butterfield’s mysterious startup plans.
“So what is Tiny Speck all about?” Siegler wrote. “That is still not entirely clear. The word on the street has been that it’s some kind of new social gaming endeavor, but all they’ll say on the site is ‘we are working on something huge and fun and we need help.’”
Maybe I make a terrible boss, but at least I know it. Work with me: http://tinyspeck.com/jobs/cptl/
— Stewart Butterfield (@stewart) July 10, 2009
Siegler would go on to invest in Slack as a general partner at GV, the venture capital arm of Alphabet .
“Clearly this is a creative project,” Siegler added. “It almost sounds like they’re making an animated movie. As awesome as that would be, with people like Henderson on board, you can bet there’s impressive engineering going on to turn this all into a game of some sort (if that is in fact what this is all about).”
After months of speculation, Tiny Speck unveiled its project: Glitch, an online game set inside the brains of 11 giants. It would be free with in-game purchases available and eventually, a paid subscription for power users.
Susan Fowler’s memoir has a title and a release date
Susan Fowler’s forthcoming memoir, titled “Whistleblower,” is scheduled to hit bookshelves March 3, 2020. The book will be available for pre-order beginning June 12.
In late 2017, Penguin Random House imprint Viking Books acquired the rights to the memoir, which chronicles the harassment and discrimination Fowler faced during her tenure as a site reliability engineer at Uber.
Her memoir “will expose the systemic flaws rampant in the startup culture,” with “previously unreported details of what happened after she went public with the harassment and discrimination she faced [at Uber],” according to Viking. Additionally, it will touch on themes such as women’s role in the American economy, navigating challenging work environments, with an “eye-popping depiction and broad indictment of a work culture where a woman can do absolutely everything right and still encounter tremendous obstacles.”
Twenty-eight-year-old Fowler is best known for her infamous blog post, “Reflecting On One Very, Very Strange Year At Uber,” published in 2017. The 3,000-word essay detailed the sexist bro-culture rampant at the fast-growing ride-hailing giant, as well as its human resources department’s negligence. Unintentionally, the writing made Fowler an overnight celebrity in the tech world, with leaders praising her for her bravery.
The blog post sparked a movement that ultimately led to the ouster of Uber’s founding chief executive officer, Travis Kalanick, and some 20 other Uber employees accused of sexual harassment or other inappropriate behavior. Kalanick was replaced by former Expedia chief Dara Khosrowshahi, who has since led the business’ highly anticipated initial public offering.
Fowler, alongside Tarana Burke, Ashley Judd and others, was named a Time Person of the Year in 2017, named on Vanity Fair’s New Establishment List, along with countless other accolades.
Exercising her writing chops, Fowler joined Stripe as the editor-in-chief of its quarterly publication, Increment, before getting scooped up by The New York Times, where she now works as an editor of the opinion section. Previously, she authored two books on computer programming.
In addition to “Whistleblower,” a movie documenting Fowler’s story is in the works. Oscar-nominated “Hidden Figures” screenwriter Allison Schroeder and former Disney executive and producer Kristin Burr have signed on to develop the film, titled “Disruptors.”
“The Disaster Artist” producer Erin Westerman is credited with landing the project for Good Universe, an independent film production company, and will oversee its production. Westerman told Deadline in late 2017 that the “project is an anthem for women and an important reminder of the power of one female voice.”
Flying Car Startup Alaka’i Bets Hydrogen Outdoes Batteries
The new aviation player is showing off an electric, boxy, six-rotor air taxi powered by hydrogen fuel cells.
‘Lion King’ director Jon Favreau explains why he’s remaking an animated classic
Disney has been cranking out live-action remakes of its animated library for the past few years — in fact, Tim Burton’s “Dumbo” just left theaters, and Guy Ritchie’s take on “Aladdin” is currently at the top of the box office.
But these distinctions get tricky with the growing reliance on computer-generated visual effects. “The Jungle Book,” for example, mostly features a single live actor (Neel Sethi as Mowgli) interacting with CGI animals. And “The Lion King” — scheduled for release on July 19 — takes that approach even further: Everything you see onscreen has been created on a computer.
I got a chance to visit the production in Los Angeles back in December 2017, where I participated in a group interview with “Jungle Book” and “Lion King” director Jon Favreau . When asked whether he considers this a live-action or animated movie, he said, “It’s difficult, because it’s neither, really.”
“There’s no real animals and there’s no real cameras and there’s not even any performance that’s being captured,” Favreau acknowledged. “There’s underlying [performance] data that’s real, but everything is coming through the hands of artists.”
At the same time, he argued that it would be “misleading” to call this an animated film. For one thing, the visuals aren’t stylized in the way you’d expect in a cartoon. Instead, the aim was to create animals that look even more realistic than the ones in “The Jungle Book” — Favreau said the footage should feel like “a BBC documentary,” albeit one where the lions talk and sing.

“Between the quality of the rendering and the techniques we’re using, it starts to hopefully feel like you’re watching something that’s not a visual effects production, but something where you’re just looking into a world that’s very realistic,” he continued. “And emotionally, feels as realistic as if you’re watching live creatures. And that’s kind of the trick here, because I don’t think anybody wants to see another animated ‘Lion King,’ because it still holds up really, really well.”
To achieve this, Favreau said he wanted this to have “the feeling of a live-action shoot,” including the way he shot the actors (Donald Glover plays Simba, Beyoncé plays Nala and James Earl Jones returns as Mufasa). Given the goal of creating photorealistic animals, Favreau said the standard motion-capture approach didn’t make sense, but he still wanted the actors to “overlap and perform together and improvise and do whatever we want.”
So he brought them together in a soundproofed stage, and they performed “standing up, almost like you would in a motion-capture stage — except no tracking markers, no data, no metadata’s being recorded, it’s only long-lens video cameras to get their faces and performances.”
Favreau compared this to shooting the original “Iron Man,” where he “tried to have multiple cameras and let Gwyneth [Paltrow] and Robert [Downey Jr.] improv when I could, because there’s so much of the movie you can’t change, because it’s visual effects.”
And even when he wasn’t working with actors, Favreau still “shot” the scenes with cinematographer Caleb Deschanel. That meant building a virtual Serengeti using the Unity game engine, then adding the digital equivalent of real-world production elements like lights and dolly tracks. The filmmakers could put on Vive VR headsets to explore the world, use iPads to adjust the various elements and then shoot scenes using a virtual camera.

“That’s the way I learned how to direct,” Favreau said. “It wasn’t sitting, looking over somebody’s shoulder [on a] computer. It was being in a real location. There’s something about being in a real 3D environment that makes it — I don’t know, just the parts of my brain are firing that fire on a real movie.”
To be clear, those virtual scenes aren’t what you’ll actually see in the theater. Instead, they provided guidance for the animators to create far more detailed shots.
Favreau said that in a sense, he was trying to resist the complete freedom that the computer-generated approach can bring. Even in the case of using iPads to tweak the virtual world, he ended up restricting who had access, “because on a movie set you can’t just walk over and move a branch — you have to have the set dresser do that, otherwise you lose track of everything.”
“I find that what the flexibility of digital production has done is given the opportunity for people to postpone being decisive,” he said. “It used to be if, you know, you built a big animatronic dinosaur, you had to make sure you got that shot right and framed right and it worked … And so, part of this experiment is to see if we really lock in early, as animated films do, and spend all of our time refining.”
As for why he’s going through all this effort to remake a film that, by his own admission, holds up really well, Favreau said he was inspired by the success of the stage musical: “People will go see the stage show, and they’ll also see the movie, and you could love both of them and see them as two different things.” Similarly, he said his team set out to “create something that feels like a completely different medium than either of those two.”
And of course, there’s the durability of the original story and songs.
“I want to highlight, really, what’s in there from the original,” Favreau said. “It’s the whole circle of life and bad things happen, good things happen. Not every scene in the movie is fun to watch … There’s tragedy in it, but ultimately what I like about it is that somehow, after that whole experience, you walk away feeling inspired and hopeful. Which is how I like my stories.”
Google announces new privacy requirements for Chrome extensions
Google today announced two major changes to how it expects Chrome extension developers to protect their users’ privacy. Starting this summer, extension developers are required to only request access to the data they need to implement their features — and nothing more. In addition, the company is expanding the number of extension developers who will have to post privacy policies.
The company is also announcing changes to how third-party developers can use the Google Drive API to provide their users access to files there.
All of this is part of Google’s Project Strobe, an effort the company launched last year to reconsider how third-party developers can access data in your Google account and on your Android devices. It was Project Strobe, for example, that detected the issues with Google+’s APIs that hastened the shutdown of the company’s failed social network. It also extends some of the work on Chrome extensions the company announced last October.
“Third-party apps and websites create services that millions of people use to get things done and customize their online experience,” Google Fellow and VP of Engineering Ben Smith writes in today’s announcement. “To make this ecosystem successful, people need to be confident their data is secure, and developers need clear rules of the road.”
With today’s announcements, Google aims to provide these rules. For extension developers, that means that if they need multiple permissions to implement a feature, they must access the least amount of data possible, for example. Previously, that’s something the company recommended. Now, it’s required.
Previously, only developers who write extensions that handle personal or sensitive data had to post privacy policies. Going forward, this requirement will also include extensions that handle any user-provided content and personal communications. “Of course, extensions must continue to be transparent in how they handle user data, disclosing the collection, use and sharing of that data,” Smith adds.
As for the Drive API, Google is essentially locking down the service a bit more and limiting third-party access to specific files. Apps that need broader access, including backup services, will have to be verified by Google. The Drive API changes won’t go into effect until next year, though.
CrunchMatch returns to simplify networking at Disrupt SF 2019
Ready to squeeze every bit of opportunity out of TechCrunch Disrupt San Francisco 2019? TechCrunch’s flagship event returns to the Moscone North Convention Center on October 2-4 and — with more than 10,000 attendees — the networking opportunities are infinite. Your time, however, is not. Don’t worry, though. We’ve got your back — with CrunchMatch.
Get strategic with your time at Disrupt with CrunchMatch, TC’s free business match-making service. Here’s how to zero in on the people and connections that matter most to your business.
Create a profile listing your specific criteria, goals and interests. CrunchMatch (powered by Brella) works a bit of algorithmic magic to find like-minded startuppers and will suggest matches and, subject to your approval, propose meeting times and send meeting requests.
Everyone attending Disrupt SF can use CrunchMatch — founders looking for developers, investors in search of hot prospects, technology service providers eager for new customers, founders looking for marketing help — the list is endless.
How effective is CrunchMatch? In 2018, the program facilitated more than 3,000 meetings. And Yoolbox — makers of a portable wireless charger — says the connections it made through CrunchMatch helped Yoolbox increase its distribution.
You’ll be able to access CrunchMatch through the Disrupt App (when it launches in September). After you sign up, you’ll identify your role (developer, service provider, founder, etc.) and the type of people you want to connect with at Disrupt. CrunchMatch will get to work and do the rest.
You’ll find more than 10,000 tech founders, investors, developers, engineers and startup fans at Disrupt San Francisco 2019. CrunchMatch will help you cut through the noise, network efficiently and save you a whole lotta time and shoe leather. Get your super early-bird passes today and save up to $1,800 on passes, and we’ll see you in October!
Is your company interested in sponsoring or exhibiting at Disrupt San Francisco 2019? Contact our sponsorship sales team by filling out this form.
Why ICS security startup Dragos’ CEO puts a premium on people not profits
Written in its company’s handbook, there’s one rule for working at Dragos. “Don’t be an asshole.”
“The first key to our success is our people and that we hire good people,” said Robert Lee, the company’s founder and chief executive, in an interview with TechCrunch. “I think building a successful team is about having a standard and saying that I expect you all to be adults and not need a million HR policies,” he said.
Lee’s management approach revolves around his company’s greatest asset — his staff. With 125 employees, the company has seen rapid growth since its founding in 2016 but puts great importance on maintaining the company’s relaxed but productive culture.
Lee said he doesn’t want to change its culture dynamics by growing too fast, micromanaging, or burdening his staff with strict expense policies. “If you’re stuck laid over at night, but you see there’s one seat left on a redeye and it’s a first class seat that’s going to cost six times more but it gets you home — go for it,” he said.
But he doesn’t compromise on his “don’t be an asshole” rule. “Say something sexist and a Slack channel? Yeah, you’re fired,” he said.
Lee founded Dragos after working as a former cyber warfare operations officer at the National Security Agency. Dragos works to secure industrial control systems (ICS), the necessary devices crucial to the continued operations of power plants, energy suppliers and other critical infrastructure.
Lee described ICS security as “all of the things in I.T. plus physics.” In other words, it’s about finding the threats targeting critical infrastructure facilities and understanding how the hackers work in order to stop hackers from controlling the gas turbines in power facility, for example.
Once a plot from a science fiction film, powerful malware like Stuxnet and Triton have emerged in recent years and targeted facilities — with near-disastrous consequences.
Alibaba pumps $100 million into Vmate to grow its video app in India
Chinese tech giant Alibaba is doubling down on India’s burgeoning video market, looking to fight back local rival ByteDance, Google and Disney to gain its foothold in the nation. The company said today that it is pumping $100 million into Vmate, a three-year-old social video app owned by subsidiary UC Web.
Vmate was launched as a video streaming and short-video-sharing app in 2016. But in the years since, it has added features such as video downloads and 3-dimensional face emojis to expand its use cases. It has amassed 30 million users globally, and will use the capital to scale its business in India, the company told TechCrunch. Alibaba Group did not respond to TechCrunch’s questions about its ownership of the app.
The move comes as Alibaba revives its attempts to take on the growing social video apps market, something on which it has missed out completely in China. Vmate could potentially help it fill the gap in India. Many of the features Vmate offers are similar to those offered by ByteDance’s TikTok, which currently has more than 120 million active users in India. ByteDance, with a valuation of about $75 billion, has grown its business without taking money from either Alibaba or Tencent, the latter of which has launched its own TikTok-like apps with limited success.
Alibaba remains one of the biggest global investors in India’s e-commerce and food-tech markets. It has heavily invested in Paytm, BigBasket, Zomato and Snapdeal. It was also supposedly planning to launch a video streaming service in India last year — a rumor that was fueled after it acquired a majority stake in TicketNew, a Chennai-based online ticketing service.
UC Web, a subsidiary of Alibaba Group, also counts India as one of its biggest markets. The browser maker has attempted to become a super app in India in recent years by including news and videos. In the last two years, it has been in talks with several bloggers and small publishers to host their articles directly on its platform, many people involved in the project told TechCrunch.
UC Web’s eponymous browser rose to stardom in the days of feature phones, but has since lost the lion’s share to Google Chrome as smartphones become more ubiquitous. Chrome ships as the default browser on most Android smartphones.
The major investment by Alibaba Group also serves as a testament to the growing popularity of video apps in India. Once cautious about each megabyte they spent on the internet, thrifty Indians have become heavy video consumers online as mobile data gets significantly cheaper in the country. Video apps are increasingly climbing up the charts on Google Play Store.
In an event for marketers late last year, YouTube said that India was the only nation where it had more unique users than its parent company Google. The video juggernaut had about 250 million active users in India at the end of 2017. The service, used by more than 2 billion users worldwide, has not revealed its India-specific user base since.
T-Series, the largest record label in India, became the first YouTube channel this week to claim more than 100 million subscribers. What’s even more noteworthy is that T-Series took 10 years to get to its first 10 million subscribers. The additional 90 million subscribers signed up to its channel in the last two years. Also fighting for users’ attention is Hotstar, which is owned by Disney. Earlier this month, it set a new global record for most simultaneous views on a live-streaming event.
Password manager Dashlane raises $110M in Series D, adds CMO
Password manager maker Dashlane has raised $110 million in its latest round of funding, the company said Thursday.
The company said Sequoia Capital led the Series D round, with partner Jim Goetz joining the board. Dashlane also said Lyft executive Joy Howard was appointed as its new chief marketing officer and will start in August.
Dashlane said it will invest its latest funds back into its core product and will focus on addressing the needs of its consumer and business customers.
Chief executive Emmanuel Schalit said the company is “only scratching the surface” of its security opportunities.
“Billions of people and millions of businesses around the world feel the pain of digital identity — from breaches to stolen identities and the nuisance of remembering passwords,” said Schalit.
“With this new capital and the addition of Joy to our leadership team, we have the resources to increase our product leadership, grow the team and build the brand that will define the future of digital identity protection,” he added.
Password managers have become all the rage in recent years following a spate of credential stuffing attacks, where hackers take breached usernames and passwords from sites and reuse them on other site accounts. By storing passwords in a single place protected by a master password or a biometric — such as a fingerprint — users can take their strong and uniquely generated passwords with them wherever they go.
Dashlane has raised more than $185 million to date.
OpenAI’s Sam Altman and Greg Brockman will tell Disrupt about tomorrow’s jobs
OpenAI’s co-founders Greg Brockman and Sam Altman aren’t afraid of Terminator robots. At TechCrunch Disrupt SF in October, they’ll tell our audience why it’s the more subtle repercussions of artificial general intelligence — like its impact on employment, cyberwarfare and concentration of power — that shake the duo.
But the epic potential for the technology to generate wide-scale abundance for humanity led Altman to leave his gig as the head of iconic accelerator Y Combinator to become CEO of OpenAI.
“I really do believe that the work we’re doing at OpenAI…will not only far eclipse the work I did at YC but the work that anyone in the tech industry does,” Altman said recently.
Brockman and Altman will join us onstage at Disrupt to talk about why they’re building potentially the most lucrative startup of all time, yet plan to cap returns for investors at 100X and donate the rest. They’ll reveal the challenges of hiring and raising capital when OpenAI has no idea how it will earn money. And we’ll discuss how humans will derive a sense of purpose and how capitalism will function if we manage to distribute the resources born from AI to provide for everyone… or if we don’t.
These are heady questions beyond the scope of most founders who are just trying sell something right now. Luckily, OpenAI’s founders are ridiculously smart. Brockman dropped out of both Harvard and MIT before becoming Stripe’s first CTO and built it up from four employees to a 250-person fintech powerhouse. Altman, meanwhile, dropped out of Stanford to demo his location-sharing app Loopt on Steve Jobs’ stage at WWDC 2008. And as the president of Y Combinator, he reviewed and mentored a thousand startups while turning the accelerator into an epicenter of innovation.
At Disrupt, expect an exciting chat filled with ideas that sound like science fiction jokes until you realize Brockman and Altman are actually serious. For example, to OpenAI’s investors, “We have made a soft promise that once we build a generally intelligent system, that basically we will ask it to figure out a way to make an investment return for you,” Altman said at a Strictly VC event this month.
We’ll ask about fellow OpenAI co-founder Elon Musk and why he stepped back from the company. Brockman will reveal what the latest in AI research means for the startup ecosystem. And Altman will give his reflections on YC as well as the big picture about how the world must prepare for the arrival of computers that are smarter than us, regardless of the timeline.
Disrupt isn’t merely about the unicorn businesses of today. We strive to give you an edge on tomorrow. And whether OpenAI invents general artificial intelligence or the company moves to support and safeguard whoever does, this panel will make sure you’re not stuck in yesterday.
Disney May Stop Filming In Georgia Over Abortion Ban
Mouse House honcho Bob Iger says it would be “very difficult” to continue working in the state if the law goes into effect.
Another Ripple From the Huawei Ban: Scientific Peer Review
IEEE, an engineering organization that publishes several scientific journals, bans Huawei employees from prepublication peer reviews.
Geothermal Energy Could Save the Climate—or Trigger Lots of Quakes
Unlike wind or solar, geothermal energy is always available, rain or shine, day and night. There’s just one thing: earthquakes.
Space Exploration and the Age of the Anthropocosmos
The new generation of space architects can learn from our successes and failures in protecting the internet commons and build a better paradigm for space.