Elon Musk’s Wants To Generate 50% Of His Revenue From Twitter Blue… But It’s Not Going To Happen

Posted in Commentary with tags on November 27, 2022 by itnerd

Elon Musk sees advertisers as a problem when it comes to him running Twitter. Thus he wants to reduce his reliance on advertisers In fact, this is his ideal revenue split:

Musk has said he wants subscriptions to account for 50% of Twitter’s total revenue, according to a message by a VP on an internal company slack.

The message, which was shared on Twitter by Platformer’s Casey Newton, said Musk thought the subscription aim “could help with conversations” and “pay by credit card could help with bots.

There’s two big problems. The fact that advertisers are fleeing the platform isn’t helping this as it reduces the revenue that he has coming into Twitter’s bank account while he makes this transition. And second, there’s the fact that it is very unlikely that Twitter Blue isn’t likely to catch on:

However, a survey from The Harris Poll, a global market research and consulting firm, found half of frequent US Twitter users said they would ditch the platform if it came with a monthly subscription fee.

The firm polled 2,063 US adults, 1,212 of which were Twitter users, from October 20 to October 28, the week Musk took over the company.

Pinar Yildirim, a professor of marketing and economics at The Wharton School, told Insider introducing a subscription model to Twitter could even drive users away from the platform. Yildirim said many users were waiting to see if Twitter becomes subscription-based.

“Worries about subscription changes have caused some users, either of higher status like some celebrities or ordinary users, to express a desire to potentially explore other platforms,” she said. 

“If in the end, the revenue model becomes such that everyone on Twitter has to pay a price,” she said, “that’s going to result clearly in a movement of users who may find it too expensive to simply be on Twitter.”

Well, that’s a problem. Then there’s the fact that the loans that Musk took require a $1 billion interest payment. But…:

If Musk wants to generate enough revenue to pay the $1 billion in interest owed on Twitter’s debt each year, it would need to add about 10 million more paying customers, according to social media expert Matt Navarra

I cannot honestly see how Musk squares this circle. With companies not advertising on Twitter, because they don’t need Twitter and Twitter needs them, there’s zero chance that Twitter Blue will make up the difference, Twitter is screwed and so is Musk. But I will guess that we will see this coming Friday as that is when Twitter Blue launches.

My Apple Watch Band Collection – The 2022 “Ultra” Edition

Posted in Products with tags on November 26, 2022 by itnerd

Since getting the Apple Watch Ultra I have done a bit of a revamp of my watch band collection to match the vibe of the Ultra. And I’ve now got longer term storage for my bands:

I found this case on Etsy. It says that it is designed for Apple Watch bands, but I think it’s more of a generic case that they advertise as an Apple Watch case. It’s made of leather and it holds my complete collection just fine.

Now that things are starting to get back to normal, I will be travelling again. And when I do, the Twelve South TimePorter will go into my bag. The big plus to the TimePorter is that you can put an Apple Watch charger in it along with a slim battery pack to allow you to charge on the go. You can even fold it up to a 45 degree angle to use it as a display stand which is a great use case for a hotel room.

Now let’s talk about the bands. But before I do, let me answer a question that I get asked a lot. Which is can you use older Apple Watch bands. The answer is yes if the bands in question are for 42mm, 44mm or 45mm Apple Watches. And there’s a bit of a catch:

As you can see here, the lugs for the bands do not fit flush with the Apple Watch Ultra. This only happens on one side and is only noticeable if you are looking for it. I thought I would point that out because the bands specifically designed for the Ultra don’t do that. Another thing to point out is that I note that some third party bands are tighter than normal to get on and off the Ultra. I am guessing that the cause for that is that Apple slightly tightened up the tolerance for the lugs on the lugs. Likely to make sure that they didn’t pull out of the watch if you were doing something “extreme” with the Ultra.

Speaking of bands for the Ultra, let’s start with the band it came with:

I got the Alpine Loop as I didn’t like the Trail Loop nor did I like the Ocean Band. Once it’s on you, it will not come off because of the titanium hook on the band. I wear this occasionally as it is very comfortable. Typically when I am doing something athletic. It does dry quickly if you sweat a lot.

I have a pair of sport loops. One is the Nike Sport Loop that has reflective thread, and the other one is the Canada Sport Loop that Apple did for the Tokyo Olympics. Much like the Alpine loop, I use them for things like workouts and anytime I need a band that will be comfortable and dry quickly.

I also have an Apple Black Unity Braided Solo Loop which I also wear for workouts. It’s pretty comfortable but I have noticed that it fits slightly on the loose side. I am not sure why that is as this is a bigger watch and the opposite should be true. But it’s not a dealbreaker for me.

The UAG Active Watch Strap is one of my go to bands for workouts it will stay on my wrist no matter what I do, but it will feel comfortable the entire time that I wear it. After all, if my wife was able to use this band to do an extreme trail running race and have the watch stay on her wrist, anything that I do should be a non-issue. It also matches the vibe of the Apple Watch as it is big and bulky.

I have a couple of Apple Sport Bands lying around from previous Apple Watches. Thus I put them into the rotation in case I need a band that could be used for going out or for athletic activities.

The Nike Sport Band from Apple as of late is my go to watch band I am doing something athletic like hiking or working out in the gym. One big plus is that it also fits my Road ID for Apple Watch which gives me a bit of extra safety should I feel the need to use it when I am out for a ride on my bike or doing a hike solo. Because it is made of rubber and has holes in it, it stays dry on your wrist.

The UAG Nato Strap is a band that I really like as it adds a bit of style to the Apple Watch Ultra. During our last road trip to PEI in 2019, it was the only band that I wore as I could hike or cycle with it in the day, and go out to dinner with it at night. And it’s machine washable as well. It also fits my Road ID for Apple Watch which gives me a bit of extra safety when I ride my bike for example. Plus it is super comfortable.

UAG also makes a Leather Watch band as well which I find to be very comfortable and stylish. Plus it includes a snap that locks everything into place so that there’s no way the watch will come off your wrist. It is starting to show some wear but I am fine with that as it adds some character.

The Watch Strap Company Link Bracelet has the look and feel of the Apple Link Bracelet without the Apple price. It’s a very premium feeling product and goes great with everything from suits or business causal clothing. I have had the black one for years, but I recently added the silver one to my collection as it almost matches the casing of the Apple Watch Ultra.

I also have The Watch Strap Company Mesh Loop (The Watch Strap Company’s term for the Milanese Loop) in my collection. It uses stainless steel that is very soft and comfortable to wear. And it is very premium feeling and durable. Again, the black one I have had for years, but I got the silver one to match the Apple Watch Ultra.

That’s my Apple Watch band collection. One thing that I have to say to those who have Apple Watches and want to have good quality upscale bands is that you should skip the really cheap bands on Amazon. Those ones from personal experience don’t have good quality materials and typically will not last all that long. Bands from companies like Apple, The Watch Strap Company, and Urban Armor Gear are examples of good quality watch bands that should be part of your collection.

What Apple Watch bands do you use? I’d be interested in hearing from women with Apple Watches as seeing as I have put forward a collection for men. Thus I figure that many women would be interested in what women use. But male users should join in on the conversation as well by leaving a comment and sharing their thoughts.

Elon Musk Suggests That He Would Make A Competitor To Apple And Google’s Phones If He’s Booted From Their App Stores

Posted in Commentary with tags on November 26, 2022 by itnerd

Okay. This whole Twitter thing since Elon Musk took over has been a crazy ride since he took over. But it’s now gotten really crazy. Because one of the potential side effects of giving anti-vaxxers, Neo-nazis, white supremacists, anti-LGBTQ activists, anti-Muslim bigots among other low life scumbags of the universe who don’t deserve a platform, amnesty on Twitter is that it may put him in the crosshairs of Apple and Google who have rules that would require the punting of the Twitter app from their respective app stores. If you want an example of that, look at Parler who was Thanos snapped out of the App Store and Play Store. I am guessing that this is a real possibility that Musk has thought of because he said this on Twitter last night:

Okay……

I have to look at this from both sides. So ignoring the fact that, this could simply be an empty threat, or that the odds are high that Apple and Google would destroy any sort of “Tesla Phone” or “Twitter Phone” in terms of sales, and that the development of this phone could easily become the same sort of train wreck next to a dumpster fire that we’re seeing at Twitter, consider this. If he threw the same people who are responsible for the in car entertainment system at Tesla, and recycle some of the silicon from that system, it isn’t actually that far fetched an idea. In fact this is completely doable from a hardware standpoint. His challenge will be the software. Google isn’t going to hand over a copy of Android to him, and Apple isn’t going to hand over a copy of iOS to him. So he will either have to do what Huawei did which is use the open source version of Android, or make his own OS. That’s a tall order either way. On top of that he needs an app ecosystem to give people a reason to buy this phone. That’s a tall order as well as you’re not going to want to jump to this phone if you can’t use the apps that you already have. And getting developers on board to make those apps will be a challenge.

Now how much market share that this phone would get would still be an open question. And more importantly, would it grab enough market share to scare Apple and Google? Personally, I am dubious that Apple and Google would be the least concerned about this Tweet from Elon. Or put another way, I seriously doubt that Tim Cook and Sundar Pichai are going to lose a moment’s worth of sleep over this Tweet. But I would suggest that this is something that is at least worth watching if he does get punted from their respective app stores.

All Of VW’s Brands Have Halted Ads On Twitter…. And They Are Saying Why They Are Doing That In Public

Posted in Commentary with tags on November 25, 2022 by itnerd

Elon Musk wants to wean Twitter off of advertising by brands. That’s why he’s pushing Twitter Blue so hard. The thing is that until Twitter Blue can generate the revenue stream that advertising generates, he needs advertisers. There’s no way around that. So it doesn’t help that Volkswagen who’s brands include, Audi, Porsche, Skoda, Lamborghini, Bentley, and Ducati have paused their advertising on Twitter. What makes this even more interesting is that they are actually speaking about why they did this:

A spokesperson for Volkswagen said all the brands had followed the advice, while Audi had opted to halt organic activities, such as direct posts, and only respond to questions from clients on the website.

WirtschaftsWoche had previously reported that Audi had halted all activities on the social media platform, citing company sources.

“We are monitoring the situation closely and will decide on the next steps depending on developments,” an Audi spokesperson added in an emailed statement to Reuters.

Audi has not tweeted since Nov. 1 after previously tweeting almost every day. Elon Musk took ownership of Twitter in late October.

Well, that’s not good if you are Elon as VW is a global brand which means that their advertising spend on Twitter must have been big. Thus that’s a lot of income that Twitter is not getting. And you have to wonder if VW going public with this will spur other companies to not only pull their ads, but to say why in public. If that happens, one has to wonder how Elon will react to that. Not well I would imagine. But we will have to see.

July’s Report Of A Twitter Data Breach Was WAY WORSE Than Previously Thought

Posted in Commentary with tags on November 25, 2022 by itnerd

Remember back in July there was a data breach on Twitter where the information on 5.4 million users was up for sale on the dark web? Well as bad as that was, we now have news that it was actually worse than that. 9to5mac is reporting the following:

We’ve been shown evidence that the same security vulnerability was exploited by multiple bad actors, and the hacked data has been offered for sale on the dark web by several sources.

It had previously been thought that only one hacker gained access to the data, and Twitter’s belated admission reinforced this impression …

And:

There were suggestions on Twitter yesterday that the same personal data had been accessed by multiple bad actors, not just one. 9to5Mac has now seen evidence that this is indeed the case. We were shown a dataset which contained the same information in a different format, with a security researcher stating that it was “definitely a different threat actor.” The source told us that this was just one of a number of files they have seen.

That’s really, really, extremely bad. And reading this report makes one wonder how this is going to get any better under Elon Musk? Because it is pretty clear that Twitter’s security was bad before he took over. So given all that has gone on, how much worse can it be with him in charge? While Twitter doesn’t have a PR department anymore, the company needs to provide some answers on this. And they need to do so now with enough detail to reassure Twitter users that they can have confidence in the company. But I am pretty sure that this is not going to happen.

UPDATE: I have commentary from Brian Johnson, Chief Security Officer at Armorblox:

“Breaches that expose email addresses and phone numbers are almost always followed up by targeted phishing and SMiShing campaigns. Given that Twitter has also been in the news a lot recently, attackers might exploit our cognitive biases like recency bias to send out fake password reset emails or SMSes to Twitter users to steal their credentials. Stolen passwords now allow them to try these passwords out laterally across other sites because many users use the same password across different providers. We recommend that users set up multi-factor authentication on all their personal and work accounts, and more specifically, watch out for suspicious emails that appear to be coming from Twitter. This includes verifying the sender email addresses, and any links that are included in the email to make sure that they are indeed related to Twitter.”

UPDATE #2: Chad McDonald, Chief of Staff and Chief Information Security Officer of Radiant Logic:

“In the latest episode of the Twitter saga, news of the significant data breach resulting in the security expert who reported it being suspended is a huge cause for concern. Security practitioners have often looked to Twitter in the past for updates from colleagues and influencers alike on the latest bugs, vulnerabilities and threat groups. Given the changes that have been brewing at Twitter these last few weeks, it would be incredibly damaging for them to not only be once again responsible for massive amounts of users being breached but that they are also making efforts to cover it up. Twitter must act, quickly, to get a serious handle on how much of their users’ information was leaked and what they plan to remedy the situation.” 

Nine out of 10 Canadian Organizations Were Breached At least Once in the Past Year: Trend Micro

Posted in Commentary with tags on November 25, 2022 by itnerd

Trend Micro Incorporated today announced that 90% of Canadian organizations have had customer records compromised at least once over the past 12 months as they struggle to profile and defend an expanding attack surface. 

The findings come from Trend Micro’s semi-annual Cyber Risk Index (CRI) report, compiled by the Ponemon Institute from interviews with over 4,100 organizations across North America, Europe, Latin/South America, and Asia-Pacific, of which 470 are Canadian.

The CRI calculates the gap between organizational preparedness and the likelihood of being attacked, with -10 representing the highest level of risk. The Canadian CRI index moved from + 0.16 in 2H 2021 to image002.png0.30 in 1H 2022, indicating a surging level of risk over the past six months. 

This trend is also reflected elsewhere in the data: the number of Canadian organizations experiencing a “successful” cyber-attack increased from 83% to 93% over the same period. Unsurprisingly, the number now expected to be compromised over the coming year has also increased from 74% to 86%.

Some of the top preparedness risks highlighted by the index report are related to attack surface discovery capabilities. It is often challenging for security professionals to identify the physical location of business-critical data assets and applications.

From the business perspective, the biggest concern is the misalignment between CISOs and business executives. Based on the scores given by the respondents, “My organization’s IT security objectives are aligned with business objectives” only has a score of 4.35 out of 10.

Overall, Canadian respondents rated the following as the top cyber threats in 1H 2022:

1)      Advanced malware

2)      Cryptomining

3)      Watering hole attacks

4)      Botnets 

5)      Business Email Compromise (BEC)

By addressing the shortage of cybersecurity professionals and improving security processes and technology, organizations will significantly reduce their vulnerability to attacks.

To read a full copy of the latest Cyber Risk Index, please visit: www.trendmicro.com/cyberrisk

Elon Musk Will Offer Amnesty To Suspended Twitter Accounts… While He Gives New Details About Twitter Blue

Posted in Commentary with tags on November 25, 2022 by itnerd

In a move that is sure to spark new alarm bells about Twitter becoming the platform of the far right, Elon Musk via yet another Twitter poll is going to restore suspended Twitter accounts.

By running these polls, he’s creating a situation where he’s creating cover for himself when, key word WHEN things go off the rails when it comes to these suspended accounts. After all, many of these accounts are anti-vaxxers, Neo-nazis, white supremacists, anti-LGBTQ activists, anti-Muslim bigots among other low life scumbags of the universe who don’t deserve a platform. So I can see that this will create a situation where the holders of these accounts make news for all the wrong reasons, and Twitter will get blamed for giving them a voice. Musk therefore will just use the excuse that “the people have spoken” when confronted with that. This despite the fact that this was likely his plan all along.

Another thing is, despite the fact that he makes moves that are this stupid, he still doesn’t get why advertisers are running in the other direction from Twitter. The answer is pretty simple, they don’t want to be associated with a platform that allows hate speech, which is something that has increased since Musk took over. But he’s too stupid to see that quite clearly.

Finally, this move is guaranteed to have the EU knocking on his door demanding answers. And if Musk doesn’t play ball with them, that will end badly for Musk.

The other thing that Musk did overnight is put out this Tweet:

The way I read this Tweet, he has no choice. He clearly wanted Twitter Blue to be a quick revenue generating method by giving it to anyone with few controls. But when that went off the rails and sent corporations to the exits, it backed him into a corner where he now has no choice but to introduce some form of verification process. And I sense he’s clearly not happy about this. It’s not clear how this will work from the Tweet. But it will be interesting to see what happens next Friday when it launches. It does open up an interesting question, if you have a checkmark and you don’t pay for Twitter Blue, what happens to you? I guess we will find that out next Friday as well.

Bahamut group targets Android users with fake VPN apps; spyware steals users’ conversations: ESET

Posted in Commentary with tags on November 24, 2022 by itnerd

ESET researchers have identified an active campaign targeting Android users, conducted by the Bahamut APT group. This campaign has been ongoing since the start of this year. Malicious spyware apps are distributed through a fake SecureVPN website that provides only trojanized Android apps to download. This website has no association whatsoever with the legitimate, multiplatform SecureVPN software and service. Malicious apps used in this campaign are able to exfiltrate contacts, SMS messages, recorded phone calls, and even chat messages from apps such as WhatsApp, Facebook Messenger, Signal, Viber, and Telegram. ESET researchers discovered at least eight versions of the Bahamut spyware, which could mean the campaign is well-maintained. The malicious apps were never available for download from Google Play. 

All exfiltrated data is stored in a local database and then sent to the Command and Control (C&C) server. The Bahamut spyware functionality includes the ability to update the app by receiving a link to a new version from the C&C server.

If the Bahamut spyware is enabled, then it can be remotely controlled by Bahamut operators and can exfiltrate various sensitive device data, such as contacts, SMS messages, call logs, a list of installed apps, device location, device accounts, device info (type of internet connection, IMEI, IP, SIM serial number), recorded phone calls, and a list of files on external storage. By misusing accessibility services, the malware can steal notes from the SafeNotes application and actively spy on chat messages and information about calls from popular messaging apps, such as imo-International Calls & Chat, Facebook Messenger, Viber, Signal Private Messenger, WhatsApp, Telegram, WeChat, and Conion apps.

The Bahamut APT group typically uses spearphishing messages and fake applications as the initial attack vector, against entities and individuals in the Middle East and South Asia. Bahamut specializes in cyberespionage, and ESET Research believes that its goal is to steal sensitive information from its victims. Bahamut is also referred to as a mercenary group offering hack-for-hire services to a wide range of clients. The name was given to this threat actor, which appears to be a master in phishing, by the Bellingcat investigative journalism group. Bellingcat named the group after the enormous fish floating in the vast Arabian Sea mentioned in the Book of Imaginary Beings written by Jorge Luis Borges. Bahamut is frequently described in Arabic mythology as an unimaginably enormous fish.

For more technical information about the latest Bahamut APT group campaign, check out the blog post “Bahamut cybermercenary group targets Android users with fake VPN apps” on WeLiveSecurity. Make sure to follow ESET Research on Twitter for the latest news from ESET Research.

The Pentagon Releases A Zero Trust Strategy

Posted in Commentary with tags on November 24, 2022 by itnerd

The Pentagon has put forward a Zero Trust strategy. The purpose of this is to guide the DoD how to direct their cybersecurity investments and efforts in the coming years to reach a “target” level of zero trust maturity over the next five years

The release of DoD’s zero trust strategy follows on the heels of the White House Office of Management and Budget’s federal zero trust strategy published earlier this year. DoD’s strategy lays out a detailed and ambitious plan for defense components to attain specific zero trust capabilities by 2027.

The aim is to counter a “rapid growth” in offensive cyber threats by shifting away from a perimeter defense model to a “never trust always verify” mindset, DoD Chief Information Officer John Sherman wrote in the foreword to the strategy.

Providing commentary on this strategy is Steve Judd, Solutions Architect at Venafi:

“The latest zero trust strategy from the Defense Department is an important step in ensuring investment is made to accelerate the adoption of zero trust. It’s encouraging to see that deadlines to submit execution plans and for completion have been set, as without these there is often a lack of urgency to act. The move towards a “never trust always verify” mindset is also very positive as an essential element of zero trust is identity. Every actor on the network – whether inside or outside the perimeter – must be authenticated and authorized with a valid identity. Yet what people often overlook is that there are two actors on the network: humans and machines. These machines include everything from cloud servers and Kubernetes clusters to servers and applications, with special levels of privileges to communicate with one another in a trusted and secure way. So, it’s important that any zero trust project takes machine identity into consideration alongside human identity management. The best way to enable this is through a control plane which automates the management of these machine identities.”

Groups outside the DoD should pay attention this as I am certain that this will be helpful to guide them as to how to make their environments much more secure.

LinkedIn encourages “Career Cushioning” to young professionals in the face of economic uncertainty

Posted in Commentary with tags on November 24, 2022 by itnerd

According to the latest Statistics Canada data, job vacancies are on the rise estimating that in August 2022, there were nearly a million unfilled positions. These vacancies coupled with the threat of recession, talent reshuffle and layoffs across sectors have young professionals examining how they can better prepare for next wave of economic uncertainty. 

In response to potential economic downturn, LinkedIn is starting to see people, “Career Cushioning”, meaning they are taking actions to keep their options open and cushioning for whatever comes next in the economy and job market. 

LinkedIn offers support in helping young professionals feel more secure about their job experience and offers ways to upskill. Below are some of the specific ways to begin “Career Cushioning” using LinkedIn as a resource.

  • Tend to Your Network: A recent global survey from LinkedIn found that almost half of people (48%) use their professional network to get job advice or referrals.  
  • Skills Matters: More than 40% of hirers on LinkedIn explicitly use skills data to fill their roles, up over 30% year-over-year. 
  • Start to put feelers out there for new roles: Turning on Open to Work on your LinkedIn profile increases your likelihood of getting a recruiter message by 2X. 

This article on LinkedIn offers additional tips.