Archive for June 12, 2023

Linda Yaccarino Started As Twitter CEO Today…. Start The Clock On How Long She Lasts

Posted in Commentary with tags on June 12, 2023 by itnerd

 A reader pointed out to me that Linda Yaccarino has begun her reign as Twitter CEO today. How long she lasts at the helm is anyone’s guess seeing as Twitter is owned by Elon Musk, and to say that he’s unstable is being generous. Anyway, according to The Verge, she sent all employees this email as one of her first acts as CEO:

Building Twitter 2.0 Together

Hello Twitter!

People keep asking me: Why Twitter? So, I’ll tell you.

From space exploration to electric vehicles, Elon knew these industries needed transformation, so he did it. More recently it has become increasingly clear that the global town square needs transformation—to drive civilization forward through the unfiltered exchange of information and open dialogue about the things that matter most to us.

Have you ever been talking with someone particularly insightful and thought, You’re brilliant—everybody should get the chance to hear this. Or, I’m learning so much from you—can we do this again? Or maybe it’s as simple as, You should have the freedom to speak your mind. We all should.

Enter Twitter 2.0.

Twitter is on a mission to become the world’s most accurate real-time information source and a global town square for communication. We’re on the precipice of making history—and that’s not an empty promise. That’s OUR reality. 

When you start by wrapping your arms around this powerful vision, literally everything is possible. You have to genuinely believe—and work hard for that belief. And in this moment of complete reinvention, we have the opportunity to reach across aisles, create new partnerships, celebrate new voices, and build something together that can change the world. And from what I can tell so far, you’re built for this

The success of Twitter 2.0 is all of our responsibility. 

We need to think big.

We need to transform.

We need to do it all together.

And we can do it all by starting from first principles – questioning our assumptions and building something new from the ground up. It’s rare to have the chance to put a new future into the hands of every person, partner, and creator on the planet.

That’s exactly why I’m here – with all of YOU.

So, let’s dig our heels in (4 inches or flat!) and build Twitter 2.0 together.

Linda

While I admire her enthusiasm and optimism, she’s got zero chance of making any of that happen. Twitter is a train wreck next to a dumpster fire of right wing nut jobs, racists, homophobes and other less than desirable human beings. All that would have to change for Twitter to be the Twitter 2.0 she wants. And with Elon Musk owning Twitter, that’s not going to happen because those are his kind of people. Which is why I my over/under of how long she stays is 180 days. I don’t see her staying any longer than that. But as always, I am free to be surprised.

Horizon3.ai Does A Deep Dive Into The MOVEit Transfer Vulnerability

Posted in Commentary with tags on June 12, 2023 by itnerd

Horizon3.ai’s Attack team has published MOVEit Transfer CVE-2023-34362 Deep Dive and Indicators of Compromise over the weekend, which includes a proof of concept (POC) remote code execution (RCE) for the vulnerability, as well as indicators of compromise.

Zach Hanley, Chief Attack Engineer, said in part: 

“On May 31, 2023, Progress released a security advisory for their MOVEit Transfer application which detailed a SQL injection leading to remote code execution and urged customers to update to the latest version. The vulnerability, CVE-2023-34362, at the time of release was believed to have been exploited in-the-wild as a 0-day dating back at least 30 days.

“Soon after publication, a flurry of threat intelligence by various companies was released which indicated that this vulnerability was exploited further back than initially thought – GreyNoise seeing activity 90 days prior and Kroll reporting similar activity as far back as 2021. The attacks have been attributed to the cl0p ransomware gang, which is attributed to several other recent 0-day ransomware campaigns such as PaperCut, GoAnywhere MFT, SolarWinds Serv-U, and Accellion FTA.”

The deep dive then illustrates the POC, points out differences between the vulnerable and patched MOVEit versions, and offers indicators of compromise.

You can read the deep dive here.

Zach noted that after execution of the POC exploit offered: “cleartext credentials for the provisioned sysadmin account, database credentials, and the service credential. All great targets for lateral movement.”

CISA Plans To Release White Paper On Software Identity

Posted in Commentary with tags on June 12, 2023 by itnerd

 The CISA planning to release a white paper on software identity this week at their “SBOM-a-Rama” as part of an effort to understand vulnerabilities.

Joe Saunders, CEO, RunSafe Security had this comment:

Identifying vulnerabilities in software begins with identifying what’s in your software. We look forward to contributing our approaches on these matters because with the collective input we can develop a way to dramatically reduce the attack surface and develop ways to dramatically change the economics of cyber attack back in favor of the defenders. This is a unifying opportunity for the entire industry.

Everything that we all do in terms of identifying vulnerabilities in software and addressing them is a good thing. The reason is that it takes away one avenue for the bad guys to pwn you or your environment.

Sonicwall Sees Massive Increase In IoT Attacks

Posted in Commentary with tags on June 12, 2023 by itnerd

The Sonicwall threat report is out. And upon reading this, one thing caught my eye:

After a relatively stable 2021, IoT malware volume jumped dramatically in 2022, breaking the 100 million mark for the first time and setting a new yearly record. SonicWall Capture Labs threat researchers recorded 112.3 million attacks in 2022, an 87% year-over-year increase. Much of this spike was centered in North America, where attacks rose 145%, and the U.S., which saw volumes rise 169%.

That is a huge spike and should concern anyone who has any IoT devices in their enterprise. Joe Saunders, CEO, RunSafe Security had this comment:

With such an intense number of attacks targeting OT and ICS, our search for solutions must intensify as well. All the teams chasing vulns and urgently developing fixes are exhausted – from password problems to more dangerous vulns leading to memory-based exploits. We need a way to address these vulns at scale instead of playing cat-n-mouse which is by definition a losing proposition for cyber defense.

As much as attack methods like ransomware and business email compromise are things that defenders need to be mindful of, IoT is the new battleground to defend your enterprise. Thus if you’re on the good guys side of the fence, you job might have just gotten harder.

Reddit Blames The API Protests For Today’s Outage… No, Seriously, Reddit Said That

Posted in Commentary with tags on June 12, 2023 by itnerd

This Reddit blackout situation just got really interesting. You might recall that the blackout in protest of Reddit’s changes to their API rules started today, and just before 11AM Reddit went down. Well, The Verge is reporting that Reddit is blaming, wait for it, the blackout for the crash.

According to Reddit, the blackout is responsible for the problems. “A significant number of subreddits shifting to private caused some expected stability issues, and we’ve been working on resolving the anticipated issue,” spokesperson Tim Rathschmidt tells The Verge.

On Monday morning, Reddit’s status page reported a “major outage” affecting Reddit’s desktop and mobile sites and its native mobile apps. “We’re aware of problems loading content and are working to resolve the issues as quickly as possible,” the company wrote on the status pagein a message at 10:58AM ET.

At 11:47AM PT, the company wrote that “We’re observing improvements across the site and expect issue to recover for most users. We will continue to closely monitor the situation.” Rathschmidt didn’t have an ETA for when things would be fixed, but the status has switched from “major outage” back to “operational.”

You can’t even make this stuff up. As in we’re unable to stay online because people turned off their subreddits. Now this could be true. But the cynic in me says that Reddit might have other issues unrelated to the blackout. And they are simply blaming the blackout for them. If that’s true, that’s pretty lame. And Reddit will have to come up with a better explanation for this. Right after they properly address the API issue and everything that surrounds that.

Reddit Is Down…. Which Is Very Odd Given What’s Going On With Reddit Today

Posted in Commentary with tags on June 12, 2023 by itnerd

The Reddit blackout which started today and will continue for who knows how long has become a real dumpster fire. I say that because Reddit is being as reported as down by DownDetector:

When I looked at Reddit, intermittently I would see that nothing is loading with the top section showing the message “Something went wrong. Just don’t panic.” So something is clearly up. What that something is, I have no clue. But a situation that didn’t look good for Reddit a couple of hours ago has gotten worse.

I’ll be keeping an eye on this.

Reddit Goes Dark In Protest Of Their API Changes…. And Reddit Will Lose This Fight

Posted in Commentary with tags on June 12, 2023 by itnerd

The Reddit community’s mass protest over the company’s controversial API changes has begun. By some counts that I have seen via a Twitch stream tracking the protest, over six thousand subreddits are participating in the protest by shutting down. Some for 48 hours which was the original plan, and some indefinitely because they are that mad at Reddit. This protest is due to Reddit’s API changes where Reddit will charge for API access. That move will basically kill third party Reddit clients, including Apollo which is the most popular third party Reddit client. But it will also hamstring community admins, most of whom are volunteers because it is easier to administer a subreddit with a third party client rather than the official Reddit app.

What doesn’t help matters much is that Reddit CEO Steve Huffman had a train wreck of an “ask me anything” last week where he did more to anger the Reddit community than to placate it. I’ve seen posts on Mastodon urging people not to log into Reddit and some subreddit admins have also set up Discord servers to encourage subscribers to stay off of Reddit. From what I see, the only big loser in this is Reddit. Now I’m not saying that Reddit should continue to give API access away. But that’s clearly not what they’re doing here. Not even close. And the fact that the Reddit community and beyond can see that is not a good look for Reddit. Steve Huffman has created a situation where the Reddit community has become so mad that they are considering moving their communities to someplace other than Reddit. Which is bad news for Reddit and Huffman as having those communities active gives Reddit the opportunity to make money via advertising. If you take away those communities, and the people who follow them, Reddit will have issues paying the bills. So If I were Huffman, I’d be rethinking my life choices at this moment because he’s the only one who will lose. And the sooner he realizes that, the sooner he can change course.

Guest Post: The TV streaming opportunity for marketers looking to reach Gen Z

Posted in Commentary with tags on June 12, 2023 by itnerd

By Christina Summers, Country Manager, Roku Canada

As more and more Canadian households move their entertainment time to TV streaming, including ad-supported TV (52 per cent) according to Roku Canada’s Video on Demand (VOD) Evolution Study, it opens up greater possibilitiesfor marketers and advertisers to extend their reach, gain deeper insights, better target, attain stronger measurement, and ultimately achieve a solid ROI via TV streaming. 

For those looking to engage with Gen Z, who currently hold $360 billion in disposable income, and are set to become the largest cohort of consumers, the opportunities are endless. For one, they’ve been dubbed the “streaming generation.” On average, Gen Z spent five minutes more per day streaming in 2022 than in 2021. Secondly, research shows that Gen Z is an entertainment-driven generation, with bite-sized ads being more effective to capture their attention than longer ads. Gen Z also prefers content that’s relevant to their interests and a lighter-ad load than what’s available on traditional TV. With these insights in mind, here are the top trends, and ways in which marketers and advertisers can better reach this key audience. 

Shifting ad consumption preferences 

Most TV streamers feel there are too many ads on cable or satellite, and for Gen Zs this is even higher. Often, too many ads result in segmented viewing time or drop-off. For advertisers, that almost always puts a dent in ROI. Advertisers can easily get around this challenge by tapping into ad-supported streaming as viewers are met with a much lighter ad load compared to traditional cable. For example, during a one-hour streamed program on The Roku Channel, a streamer would see eight minutes of ads compared to linear TV’s 12 minutes of ads. This lighter ad load is preferred by many viewers – especially due to the limited, eight-second of Gen Z. 

With that, advertisers can re-evaluate their creative, ensuring it’s tight, personalized, and effective within a shorter amount of time. That’s where ad formats come into play. 

Ad format considerations to drive engagement 

Interactive ad formats such as QR codes, personalized videos, display ads, action ads, and the “OK” button on the Roku remote, for example, make it easier for viewers to get the information they want from an ad. In fact, 76 per centof TV streamers take measurable actions after seeing TV ads. This includes Gen Zs (28 per cent) who grew up with the ease and convenience of online shopping and are more likely than other generations to immediately buy a product through an app while watching TV. 

Take QR codes, for example, which made a comeback during the pandemic. They are an effective way for advertisers and marketers to share additional information through TV streaming – and TV streamers are open to it: 21 per cent will consider using QR codes from streaming TV ads in the future, showing the opportunity for advertisers and marketers to offer more information beyond the ad creative, as well as links to online shopping. Unsurprisingly, young consumers are much more open to scanning a QR code on an ad, with 30 per cent of 18 to 24-year-olds agreeing that they would consider using a QR code from TV streaming ads in the future – more so than all other age demographics. 

Gen Z is also more inclined to pay attention to ads that reflect or are relevant to their mood (51 per cent) and prefer when the tone of a TV ad matches the program it’s in (40 per cent) like a comedy show with funny ads. This opens interesting opportunities for marketers and advertisers to model their creative to the type of show their target audiences are watching to better engage with their Gen Z audiences. 

 So.., how do we measure it all?

Knowing how to target the Gen Z audience is one thing, but ensuring you have the data to continue targeting this demographic properly is the next step. TV streaming ads offer deeper insights to traditional forms of advertising with access to third-party libraries and thousands of consumer segments across over-the-top (OTT) platforms. 

With stronger engagement capabilities, and ads being more engaging to consumers in general – especially tech-savvy Gen Zs – TV streaming audiences are primed to convert more than other forms of advertising. Especially as data shows a steady increase in the number of Canadians “cord cutting” year-over-year. 

With more and more Canadians shifting to TV streaming, the future of all TV advertising is streaming. Advertisers and marketers should consider these trends in format and creative when building out future campaigns for this year and beyond, especially when we see how the youngest demographic of digital natives prefers ad features that are unique to TV streaming. The opportunities for TV streaming ads are there for advertisers and marketers, and their audiences are well-prepared for the shift. 

Self-serve TV Streaming ad platforms, like Roku’s OneView, enable agencies and marketers to execute full-funnel marketing strategies on the TV screen more efficiently than traditional, linear TV spots, all while reaching an increasing number of consumers through targeted advertising. In 2023, TV streaming will open a world of opportunities for advertisers, and those focused on how to best integrate within their holistic strategies are likely to reap the benefits now and in the future. 

To learn more about Roku’s advertising offerings, visit: https://advertising.roku.com/en-ca