Archive for November, 2023

Microsoft Discovers Diamond Sleet’s Supply Chain Attack

Posted in Commentary with tags on November 25, 2023 by itnerd

The North Koreans are up to no good again. Microsoft is reporting that they have discover a supply chain attack by a group of threat actors named Diamond Sleet who are using a malicious variant of a legitimate CyberLink application installer that has been modified to include malicious code that downloads, decrypts, and loads a second-stage payload:

Microsoft Threat Intelligence has uncovered a supply chain attack by the North Korea-based threat actor Diamond Sleet (ZINC) involving a malicious variant of an application developed by CyberLink Corp., a software company that develops multimedia software products. This malicious file is a legitimate CyberLink application installer that has been modified to include malicious code that downloads, decrypts, and loads a second-stage payload. The file, which was signed using a valid certificate issued to CyberLink Corp., is hosted on legitimate update infrastructure owned by CyberLink and includes checks to limit the time window for execution and evade detection by security products. Thus far, the malicious activity has impacted over 100 devices in multiple countries, including Japan, Taiwan, Canada, and the United States.

Microsoft attributes this activity with high confidence to Diamond Sleet, a North Korean threat actor. The second-stage payload observed in this campaign communicates with infrastructure that has been previously compromised by Diamond Sleet. More recently, Microsoft has observed Diamond Sleet utilizing trojanized open-source and proprietary software to target organizations in information technology, defense, and media.

 Ken Westin, Field CISO, Panther Labs had this to say:

North Korean APT groups continue to target the software supply chain because it’s proven to be successful repeatedly, instead of targeting individual systems, they infect software upstream giving them potential access to a larger number of systems. They continue to increase the level of sophistication in these attacks with strong knowledge of the tooling and techniques of modern DevOps teams. Most organizations are not monitoring their DevOps processes for these types of attacks and lack mechanisms to detect when code may be compromised. I predict more threat groups will follow this approach to infect a larger number of systems downstream as well as improve methods to bypass rudimentary security measures.

I encourage you to read the full report as it has a lot of detail as to what you can do to protect yourself from this threat actor. Because this group of North Koreans clearly mean business.

Elon Musk Is Going To Israel To Convince You That He Isn’t Antisemitic

Posted in Commentary with tags on November 25, 2023 by itnerd

News filtered out last night that Elon Musk is going to make a trip to Israel. Here’s the details as we know them:

Mr Musk will meet Israeli Prime Minister Benjamin Netanyahu and President Isaac Herzog, and travel to the settlements that were attacked during last month’s Hamas invasion, according to local reports.

Sound like he’s on a bit of an apology tour to try and show that he’s not an antisemitic jerk. Despite the fact that he’s endorsed antisemitic conspiracy theories. Why has he decided to do this? I am going to guess that it has something to do with this:

X, the social media company formerly known as Twitter, could lose as much as $75 million in advertising revenue by the end of the year as dozens of major brands pause their marketing campaigns after its owner, Elon Musk, endorsed an antisemitic conspiracy theory this month.

Internal documents viewed by The New York Times this week show that the company is in a more difficult position than previously known and that concerns about Mr. Musk and the platform have spread far beyond companies including IBM, Apple and Disney, which paused their advertising campaigns on X last week. The documents list more than 200 ad units of companies from the likes of Airbnb, Amazon, Coca-Cola and Microsoft, many of which have halted or are considering pausing their ads on the social network.

The documents come from X’s sales team and are meant to track the impact of all the advertising lapses this month, including those by companies that have already paused and others that may be at risk of doing so. They list how much ad revenue X employees fear the company could lose through the end of the year if advertisers do not return.

On Friday, X said in a statement that $11 million in revenue was at risk and that the exact figure fluctuated as some advertisers returned to the platform and others increased spending. The company said the numbers viewed by The Times were either outdated or represented an internal exercise to evaluate total risk.

The advertising freezes come during the final three months of the year, which is traditionally the social media company’s strongest quarter as brands run holiday promotions for events such as Black Friday and Cyber Monday. In the last three months of 2021 — the last year the company reported fourth-quarter earnings before Mr. Musk took over — the company recorded $1.57 billion in revenue, of which nearly 90 percent came from advertising.

In other words, he’s hurting for cash and needs to make this go away as quickly as possible if he can. The fact is that nobody should be fooled by this apology tour. Elon isn’t going to change who he is. And we’ll be talking about some other Elon related controversy soon enough.

The best things that we can all do is to first, ignore Elon when he makes this trip. Second, we should ignore Twitter as it’s a dying platform which is a cesspool of hate and misinformation.

Canadian Black Friday Data | Quick snapshot

Posted in Commentary with tags on November 24, 2023 by itnerd

Here’s some Canadian Black Friday shopping results that came in just moments ago based on Salesforce’s global shopping data from more than 1.5 billion consumers, as well as a link to their holiday insights hub.

Canadian Black Friday Findings (as of 2 p.m. ET):

  • Online sales are up 7% YoY globally but down 1% YoY in Canada.
    • In an interesting contrast, the US saw sales jump 16% driven primarily by order volume, rather than inflation, signaling increased consumer demand south of the border.
  • Average order value declined YoY to $101.5 (down from $104.4 in 2022) and SKU count declined by 5% YoY as well. 
  • Black Friday discounts remained flat YoY at 25%. 

Full Black Friday results will be shared this coming Monday morning, along with Cyber Monday predictions.

New Black Friday offers from Public Mobile

Posted in Commentary on November 24, 2023 by itnerd

Here’s some exciting new Black Friday offers from Public Mobile.

For a limited time only, customers can subscribe to any of the following 30-day subscription plans and enjoy unlimited Canada-wide data at 5G speeds, calling and texting:

  • 40GB for $34 per month
  • 50GB for $40 per month
  • 60GB for $50 per month

Visit Public Mobile’s website for more information on our Black Friday deals.

The dBrand Vs. Casetify Dumpster Fire Gets Worse For Casetify

Posted in Commentary with tags , on November 24, 2023 by itnerd

This is one of these situations where every time I turn around, there’s a new plot twist to the dBrand vs. Casetfiy situation. Hot off the heels of this and this comes a new accusation from dBrand. Which is that Casetify may have also been stealing from iFixit. Here’s the Twitter thread that brought this to light:

I’m watching to see how iFixit responds to this. As in do they sue Casetify and add to their misery. But the bottom line is that this not a good look for Casetify if this is accurate. Even if it isn’t (and to be frank, I don’t know how it can’t be accurate), the bad press that this has created means that Casetify is likely heading toward oblivion. To paraphrase Tony Stark from “The Avengers” there is no scenario where Casetify comes out on top of this situation.

RIP Casetify.

Save Big This Black Friday With deals On TELUS Mobility, SmartHome Security, Koodo And more

Posted in Commentary with tags on November 24, 2023 by itnerd

Black Friday is here and TELUS is offering customers great deals on a variety of cell phone plans, internet, TV, and home security plans. Below is a roundup of our top sales:

TELUS mobility

  • Get unlimited data, talk and text, plus 120GB at 5G+ speeds for $75/month after bill credits.
  • Bring your own device and get unlimited data, talk and text, plus 30GB at 5G+ speeds for $55/month after bill credits (available in Quebec only). 
  • $0 upfront for the most popular smartphones, including the iPhone 14 and Samsung S23 FE, with TELUS Easy Payment and Bring-It-Back program. 
  • For a limited time only until November 27, all online orders for the Samsung S23 FE will come with a pair of Samsung Galaxy Buds FE True Wireless Earbuds as a gift with purchase.

Koodo

  • Enjoy 70GB at 5G speeds and unlimited Canada-wide call and text for $55/month, when you bring your own phone or buy a phone on the Tab (excluding Quebec).
  • Get three months of Amazon Prime on us with select Pick Your Perk plans
  • Save $10/month when you bundle Koodo Internet together with a Koodo mobility plan

Public Mobile

  • Subscribe to a 30GB plan at 4G speeds and get unlimited Canada-wide call and text for just $34/month.
  • Subscribe to a 30GB plan at 5G speeds and get unlimited Canada-wide data, call and text for just $34/month (available in Quebec only).

Stream+

  • Add Stream+ to any new and existing TELUS or Koodo mobility plan for just $10/month for the first three months, and enjoy an exclusive bundle of Netflix Premium, AppleTV+ and discovery+

Home Security

  • Get a bonus Doorbell Camera plus free professional installation all for $0 with our SmartHome Security plans

Mobile Klinik

  • Save up to 50% on a wide selection of certified pre-owned devices from top brands, in-store or online. 
  • Purchase and finance a certified pre-owned phone in-store for as low as $0/month on select devices. Customers will also get a $100 store credit that can be used towards the device purchase or an accessory, an exclusive $50 sustainability credit, and 20% off all phone cases at participating locations.
  • For a limited time until November 27, purchase and activate a certified pre-owned phone in-store and get the Protection Bundle for $0 ($99 value), which includes a case, screen protector and 2-years unlimited screen repairs.

Optik TV and PureFibre

  • Get an Xbox Series X on us and save up to $460 when you bundle PureFibre Internet and Optik TV. Save an additional $5 a month with code BLACKFRIDAY. 

For more Black Friday deals from TELUS, visit telus.com/deals.

Casetify Is Getting Torched On Twitter As They Yank All Their Cases That Are Related To The dBrand Lawsuit

Posted in Commentary with tags , on November 24, 2023 by itnerd

Yesterday it came to light that dBrand was suing Casetify because the latter was allegedly ripping off dBrand’s Teardown Skins. And based on the available evidence, it looks like dBrand caught Casetify red handed. At the same time, it was noted that Casetify’s website was taken down. When I noted that, I said this:

I wonder if they know that they got seemingly red handed and are currently scrubbing their site to remove any evidence that they ripped off dBrand’s work. Because based on the available evidence, that’s exactly what they have appeared to have done.

We now have an answer to that.

I’ll be blunt. This statement sucks. They got caught ripping off another company’s design, but it is somehow an “allegation”. And from checking my usual sources for seeing if a DDoS attack happened, I can’t find any evidence that this happened. That’s on top of them trying to elicit sympathy from people who read this statement. Frankly, this is the worst thing that they could have done and they would have been better off saying nothing in my opinion.

The thing is that it didn’t take long for Casetify to get lit up on Twitter because of that statement. And starting the “fun” was dBrand:

Burn. But it gets worse for Casetify. Here’s a sample of shots that Twitter users have taken at Casetify:

You get the idea. It’s not going well for Casetify. And long before this gets inside a courtroom, the bad press alone will likely cripple if not kill Casetify. If Casetify were smart, they would quickly find a way to come up with a settlement with dBrand. And on top of that, they should make a substantial donation to JerryRigEverything’s wheelchair company as that would at least create the impression that Casetify aren’t blatant rip off artists. Because right now, this whole episode makes Casetify look guilty as sin. And I guarantee, based on what’s happened in the last 24 hours, this will not end well for them if they don’t change direction in terms of how they’re handling this.

UPDATE: This just dropped from dBrand:

Man. dBrand is really on point here.

Rakuten Lists Merchants Who Will Have Increased Cash Back Incentives For Black Friday

Posted in Commentary with tags on November 23, 2023 by itnerd

Seeing as Black Friday is tomorrow, here’s a list of Rakuten merchants who will have increased cash back until November 26 on tech products.

Rakuten.ca’s Increased Cash Back Deals in Canada 

  • Dyson – Regular Cash Back: was 2.5%, now 10%
  • Lenovo – Regular Cash Back: was 3%, now 15%
  • Dell Technologies – Regular Cash Back: was 5%, now up to 15%
  • Best Buy – Regular Cash Back: was 1%, now up to 4%
  • HP – Regular Cash Back: was 2%, now 15%

Since launching in 2012, Rakuten.ca has helped its over 7 million members earn over $140 million in Cash Back at their favourite stores. By connecting shoppers with top brands, they already know and love, and provide Cash Back on items they buy every day, while retail partners find new loyal customers and drive record sales. With over 750 stores, everyone is bound to find one of their favourite stores or discover something new on Rakuten.ca.

dBrand Sues Casetify Over IP Theft Related To dBrand’s Teardown Skins

Posted in Commentary with tags , , on November 23, 2023 by itnerd

For years, dBrand has been selling a coloration with YouTuber JerryRigEverything called the Teardown skin. Basically they are skins that go onto your device that shows what the inside looks like. They are really detailed and cool for those who are into that sort of thing.

However, dBrand is now accusing Casetify of ripping off their work. And they are suing them as a result:

To further illustrate dBrand’s case, JerryRigEverything has posted a video going into a whole lot more detail:

I looked around for some sort of response from Casetify, but I didn’t see one. But what’s curious is that their website is down as I type this:

I wonder if they know that they got seemingly red handed and are currently scrubbing their site to remove any evidence that they ripped off dBrand’s work. Because based on the available evidence, that’s exactly what they have appeared to have done.

And as if to twist the knife some more, dBrand in the last 24 hours or so have released the Dbrand is launching the X-ray skins. These come in two versions, a light and a dark version. And if you buy one, you get the other for free. Crafty.

In the meantime, you have to wonder what is going on at Casetify. This is a classic case of a company self pwning themselves. It will be interesting to see if they are able to get out of this situation without the company being sued into extinction.

Get the popcorn ready.

TELUS Expands Reconciliation Commitments To Include AI In 5th Annual TELUS Indigenous Reconciliation & Connectivity Report

Posted in Commentary with tags on November 23, 2023 by itnerd

Today, TELUS released its fifth annual Indigenous Reconciliation & Connectivity Report, detailing how the company is on track or exceeding its reconciliation commitments and announcing a new goal to incorporate Indigenous perspectives into its data ethics and artificial intelligence (AI) strategy. The 2023 report features artwork by Indigenous creators Johnny Ketlo III of Nadleh Whut’en and Ryan Dickie of Fort Nelson First Nation, and includes dozens of inspiring stories about how Indigenous Peoples are harnessing the limitless possibilities of TELUS’ world-leading connectivity and investments to improve education outcomes, revitalize language, increase economic participation and drive long-term prosperity in their communities and beyond.

Included in the 2023 report are clear examples of how corporations can advance reconciliation across Canada through thoughtful procurement, recruitment and workforce-development strategies. For its leadership in economic reconciliation, TELUS was recently honoured with the Indigenomics 10 to Watch Award, which recognizes businesses, partnerships and initiatives who are leading the way toward a $100 billion Indigenous economy.

In 2021, TELUS became the first technology company in Canada to launch a public Indigenous Reconciliation Action Plan, embracing its corporate responsibility in this area and ensuring accountability for its strategic targets.

TELUS’ Indigenous Reconciliation Action Plan is built on four pillars with measurable targets and timelines. Key milestones for 2023 include:

  • Connectivity: 120 additional Indigenous lands connected to advanced broadband technology between 2022 and 2023, in partnership with Indigenous governments.
  • Enabling social outcomes: $2 million committed to support Indigenous-led organizations focused on mental health and well-being; language and cultural revitalization; access to education; and community building through the Indigenous Communities Fund
  • Cultural responsiveness and relationships: More than 700,000 students and educators engaged through the TELUS-funded Digital Witness Blanket project, which explores the legacy of residential schools in Canada through Indigenous experiences, perspectives and artifacts. 
  • Economic reconciliation: 1 new commitment announced to incorporate Indigenous perspectives into TELUS’ AI and data ethics strategy

To learn more about TELUS’ commitment to reconciliation and to read the 2023 Indigenous Reconciliation and Connectivity Report, visit telus.com/reconciliation.