Tuesday, 12 February 2019

No, Tencent isn’t about to burn Reddit down

Ahoy, it’s doom and gloom for Reddit after the company welcomed investment from Chinese censorship overlord Tencent.

Well, not quite.

The reality is, in fact, it’s quite the opposite. In recruiting the company behind one of the internet’s largest and vibrant social networks — chat app WeChat — and countless blockbuster games, Reddit has pulled off a major coup and banked a huge amount of cash, both of which can help it grow to the next level.

But, right now, reports in the U.S. are suggesting otherwise. You might have seen a range of negative stories surface in the past week following Reddit’s latest round of investment — first reported by TechCrunch — which is led by Tencent and values the company at $3 billion.

Triggered by a Gizmodo story last week, fear is being stoked that a deal with the “Chinese censorship powerhouse” could lead Reddit awry and bankrupt its morality, well, whatever of that it has left. Reddit users, not ones to be slow on humor, have already plastered the site with content that would be forbidden in China, including Winnie the Pooh, the cartoon character often used to represent Chinese President Xi Jinping.

Gizmodo referred to Tencent as “one of the most important architects of the Great Firewall,” and that’s a refrain that has been repeated in countless other reports.

I get it, it‘s a delicious irony; one of the lawless parts of the internet combining forces with a company that aggressively monitors and censors its users. Plus, Reddit is already blocked in China.

But, unfortunately for Gizmodo, the fears are overblown and its descriptions of Tencent are at best naive and at worst deliberately misguided.

China’s censorship system

Tencent is no “architect” of China’s Great Firewall internet censorship program. It’s one of a number of companies which, from its success, finds itself a prominent target for the government with little room to wiggle out.

Tencent sits in an awkward position, for sure. It is the largest internet company in China — it became the first $500 billion firm in Asia last year — and that makes it a core part of the government’s ongoing campaign to control Chinese internet space.

After an unprecedented crackdown on the Twitter-like service Weibo in 2012, when the government closed down comments for three days, China’s censorship became more proactive rather than reactive. That approach leaves fewer traces, for one thing, and it allows Beijing to shift responsibility to the platforms themselves, which fear the repercussions of angering authorities.

That’s to say that today’s dynamic sees China’s top internet companies, including Tencent, instructed to monitor the content produced by their users and, where necessary, remove it.

Reddit CEO Steve Huffman delivers remarks on “Redesigning Reddit” during the third day of Web Summit in Altice Arena on November 08, 2017 in Lisbon, Portugal. Web Summit.

Censoring social networks is one thing, but censoring WeChat — Tencent’s prized asset and China’s top messaging app with more than a billion monthly users — is another thing altogether. Tencent has been roundly (and rightly) criticized for implementing a range of “silent” blocks that, for some terms, prevent messages from being sent or picked up by the receiver.

Likewise, it has also purged millions of accounts from WeChat following numerous rounds of government-led initiatives that crack down on media, pornography and unsubstantiated rumors.

Those crackdowns and censorship moves are not false, but Gizmodo is painting a picture that suggests Tencent is complicit in cleaning its slate.

The truth is that the company, even a company of its size, has no choice in the matter when the Chinese government comes knocking with demands. To ignore the summons, or fail to act, would cause Tencent — a publicly listed company — serious problems that would not reflect well for shareholders. Adhering to these demands is expensive and resource-intensive, as it requires a new “content checking” division with specialist employees hired and trained. In short, it is certainly not something companies willingly opt-in to.

A rite of passage

Tencent is definitely not in control of the agenda, as anyone with an eye on tech in China can tell you. The company suffered a poor end to 2018, in part because the Chinese government decided to freeze new game licenses.

That left Tencent unable to monetize its new roster of games, a situation that saw it lose countless hundreds of millions in revenue and saw its share price drop by nearly 50 percent between March and October. The freeze has only just thawed, with a handful of licenses tentatively distributed this year.

So much for the Chinese government looking after their own.

These issues affect every tech company in China with a meaningful presence. Getting hit by government demands and censorship requests is a rite of passage for tech startups in China, like a dreaded badge of honor that shows your service has grown suitably influential to be considered a threat.

That happened to ByteDance, the company behind TikTok, the current social darling for many U.S. media. Last year, its CEO was forced to issue a groveling apology after it had “overemphasized growth and scale over quality and responsibility.”

The company resolved to increase its content checkers (read, censorship police) from 6,000 to 10,000 people, a move likely made to appease the government. Still, it was made an example of, with a number of TikTok apps removed from app stores and shuttered on the word of authorities.

Welcome to the club!

But it isn’t just Chinese companies.

Tencent became Asia’s first $500 billion company thanks to a stock rally — today it is worth around $425 billion [Photographer: Qilai Shen/Bloomberg via Getty Images]

Choices

Apple, the self-proclaimed protector of freedom, removed every unlicensed VPN from its China-based App Store at the behest of the government in 2017. While, in a rare move that runs counter to its core privacy focus, it relented to state rules and agreed to store Chinese iCloud user data on Chinese soil, through a government-backed cloud service provider, no less.

The difference between Apple and the likes of Tencent and ByteDance is that the U.S. company has a choice. It entered China voluntarily and it has complied with free speech-quashing demands to keep its revenue flowing.

Tencent and ByteDance, as the biggest internet players, would have a tough time moving outside of their native China and remaining in business. Maybe, in today’s censorship-heavy era, some Chinese companies wish they had started out in Hong Kong or another domain, but few markets have the opportunity that comes with 800 million internet users.

The point is that they have no control over censorship demands and no leverage to push back. To blame them — and paint them as co-conspirators, even “architects” — is misleading.

Tencent, in fact, has a reputation as a skillful investor that can be an asset for non-Chinese companies.

Its capital and guidance helped Fortnite creator Epic Games completely revamp its business into the smash hit success that it is today. Elsewhere, Tencent is the largest single investor in Snap — CEO Evan Spiegel has said he often seeks its guidance — and its other deals include Tesla, Discord, Kik and more, none of which have resulted in the introduction of censorship.

Yes, Reddit and Tencent are strange bedfellows, but that’s exactly the point of venture capital. The best founders surround themselves with different opinions, perspectives and experiences to ensure that they are evaluating all possible strategies. Tencent can give Reddit unique insight which, for those who use it, can only be a net positive for the future health of Reddit’s business and continued service.



from Apple – TechCrunch https://tcrn.ch/2tjS7dW

Apple fails to block porn & gambling “Enterprise” apps

Facebook and Google were far from the only developers openly abusing Apple’s Enterprise Certificate program meant for companies offering employee-only apps. A TechCrunch investigation uncovered a dozen hardcore pornography apps and a dozen real-money gambling apps that escaped Apple’s oversight. The developers passed Apple’s weak Enterprise Certificate screening process or piggybacked on a legitimate approval, allowing them to sidestep the App Store and Cupertino’s traditional safeguards designed to keep iOS family friendly. Without proper oversight, they were able to operate these vice apps that blatantly flaunt Apple’s content policies.

The situation shows further evidence that Apple has been neglecting its responsibility to police the Enterprise Certificate program, leading to its exploitation to circumvent App Store rules and forbidden categories. For a company whose CEO Tim Cook frequently criticizes its competitors for data misuse and policy fiascos like Facebook’s Cambridge Analytica, Apple’s failure to catch and block these porn and gambling demonstrates it has work to do itself.

Porn apps PPAV and iPorn (iP) continue to abuse Apple’s Enterprise Certificate program to sidestep the App Store’s ban on pornography. Nudity censored by TechCrunch

 

TechCrunch broke the news last week that Facebook and Google had broken the rules of Apple’s Enterprise Certificate program to distribute apps that installed VPNs or demanded root network access to collect all of a user’s traffic and phone activity for competitive intelligence. That led Apple to briefly revoke Facebook and Google’s Certificates, thereby disabling the companies’ legitimate employee-only apps which caused office chaos.

Apple issued a fiery statement that “Facebook has been using their membership to distribute a data-collecting app to consumers, which is a clear breach of their agreement with Apple. Any developer using their enterprise certificates to distribute apps to consumers will have their certificates revoked, which is what we did in this case to protect our users and their data.” Meanwhile, dozens of prohibited apps were available for download from shady developers’ websites.

Apple offers a lookup tool for finding any business’ D-U-N-S number, allowing shady developers to forge their Enterprise Certificate application

The problem starts with Apple’s lax standards for accepting businesses to the enterprise program. The program is for companies to distribute apps only to their employees, and its policy explicitly states “You may not use, distribute or otherwise make Your Internal Use Applications available to Your Customers”. Yet Apple doesn’t adequately enforce these policies.

Developers simply have to fill out an online form and pay $299 to Apple, as detailed in this guide from Calvium. The form merely asks developers to pledge they’re building an Enterprise Certificate app for internal employee-only use, that they have the legal authority to register the business, provide a D-U-N-S business ID number, and have an up to date Mac. You can easily Google a business’ address details and look up their D-U-N-S ID number with a tool Apple provides. After setting up an Apple ID and agreeing to its terms of service, businesses wait one to four weeks for a phone call from Apple asking them to reconfirm they’ll only distribute apps internally and are authorized to represent their business.

With just a few lies on the phone and web plus some Googleable public information, sketchy developers can get approved for an Apple Enterprise Certificate.

Real-money gambling apps openly advertise that they have iOS versions available that abuse the Enterprise Certificate program

Given the number of policy-violating apps that are being distributed to non-employees using registrations for businesses unrelated to their apps, it’s clear that Apple needs to tighten the oversight on the Enterprise Certificate program. TechCrunch found thousands of sites offering downloads of “sideloaded” Enterprise apps, and investigating just a sample uncovered numerous abuses.  Using a standard un-jailbroken iPhone. TechCrunch was able to download and verify 12 pornography and 12 real-money gambling apps over the past week that were abusing Apple’s Enterprise Certificate system to offer apps prohibited from the App Store. These apps either offered streaming or pay-per-view hardcore pornography, or allowed users to deposit, win, and withdraw real money — all of which would be prohibited if the apps were distributed through the App Store.

A whole screen of prohibited sideloaded porn and gambling apps TechCrunch was able to download through the Enterprise Certificate system

In an apparent effort to step up policy enforcement in the wake of TechCrunch’s investigation into Facebook and Google’s Enterprise Certificate violations, Apple appears to have disabled some of these apps in the past few days, but many remain operational. The porn apps that we discovered which are currently functional include Swag, PPAV, Banana Video, iPorn (iP), Pear, Poshow, and AVBobo, while the currently functional gambling apps include RD Poker and RiverPoker.

The Enterprise Certificates for these apps were rarely registered to company names related to their true purpose. The only example was Lucky8 for gambling. Many of the apps used innocuous names like Interprener, Mohajer International Communications, Sungate, and AsianLiveTech. Yet others seemed to have forged or stolen credentials to sign up under the names of completely unrelated but legitimate businesses. Dragon Gaming was registered to US gravel supplier CSL-LOMA. As for porn apps, PPAV’s certificate is assigned to the Nanjing Jianye District Information Center, Douyin Didi was licensed under Moscow motorcycle company Akura OOO, Chinese app Pear is registered to Grupo Arcavi Sociedad Anonima in Costa Rica, and AVBobo covers its tracks with the name of a Fresno-based company called Chaney Cabinet & Furniture Co.

You can see a full list of the policy violating apps we found below:

Apple refused to explain how these apps slipped into the Enterprise Certificate app program. It declined say if it does any follow-up compliance audits on developers in the program or if it plans to change admission process. An Apple spokesperson did provide this statement, though, indicating it will work to shut these apps down and potentially ban the developers from building iOS products entirely:

“Developers that abuse our enterprise certificates are in violation of the Apple Developer Enterprise Program Agreement and will have their certificates terminated, and if appropriate, they will be removed from our Developer Program completely. We are continuously evaluating the cases of misuse and are prepared to take immediate action.”

TechCrunch asked Guardian Mobile Firewall’s security expert Will Strafach to look at the apps we found and their Certificates. Strafach’s initial analysis of the apps didn’t find any glaring evidence that the apps misappropriate data, but they all do violate Apple’s Certificate policies and provide content banned from the App Store. “At the moment, I have noticed that action is slower regarding apps available from an independent website and not these easy-to-scrape app directories” that occasionally crop up offering centralized access to a plethora of sideloaded apps.

Porn app AVBobo uses an Enterprise Certificate registered to Fresno’s Chaney Cabinet & Furniture Co

Strafach explained how “A significant number of the Enterprise Certificates used to sign publicly available apps are referred to informally as ‘rogue certificates’ as they are often not associated with the named company. There are no hard facts to confirm the manner in which these certificates originate, but the result of the initial step is that individuals will gain control of an Enterprise Certificate attributable to a corporation, usually China/HK-based. Code services are then sold quietly on Chinese language marketplaces, resulting in sometimes 5 to 10 (or more) distinct apps being signed with the same Enterprise Certificate.” We found Sungate and Mohajer Certificates were farmed out for use by multiple apps in this way.

“In my experience, Enterprise Certificate signed apps available on independent websites have not been harmful to users in a malicious sense, only in the sense that they have broken the rules” Strafach notes. “Enterprise Certificate signed apps from these Chinese ‘helper’ tools, however, have been a mixed bag. Zoe example, in multiple cases, we have noticed such apps with additional tracking and adware code injected into the original now-repackaged app being offered.”

Porn apps like Swag openly advertise their availability on iOS

Interestingly, none of the off-limits apps we discovered asked users to install a VPN like Google Screenwise, let alone root network access like Facebook Research. TechCrunch reported this month that both apps had been paying users to snoop on their private data. But the iOS versions were banned by Apple after we exposed their policy violations, and Apple also caused chaos at Facebook and Google’s offices by temporarily shutting down their employee-only iOS apps too. The fact that these two US tech giants were more aggressive about collecting user data than shady Chinese porn and gambling apps is telling.“This is a cat-and-mouse game” Strafach concluded regarding Apple’s struggle to keep out these apps. But given the rampant abuse, it seems Apple could easily add stronger verification processes and more check-ups to the Enterprise Certificate program. Developers should have to do more to prove their apps’ connection with the Certificate holder, and Apple should regularly audit certificates to see what kind of apps they’re powering.

Back when Facebook missed Cambridge Analytica’s abuse of its app platform, Cook was asked what he’d do in Mark Zuckerberg’s shoes. “I wouldn’t be in this situation” Cook frankly replied. But if Apple can’t keep porn and casinos off iOS, perhaps Cook shouldn’t be lecturing anyone else.



from Apple – TechCrunch https://tcrn.ch/2GF1QmM

Sub-brands are the new weapon in China’s smartphone war

Monday, 11 February 2019

New figures highlight the iPhone’s rough quarter in China

When Apple issued revised guidance for its quarterly earnings last month, the company singled out China as a primary driver for its disappointing result. Sure enough, iPhone revenue declined 15 percent year over year, and now IDC’s got some more insight into the role the Chinese market may have played in that decline.

New figures out this week show right around a 20 percent dip in shipments in China y-o-y for the quarter. That’s a pretty dramatic drop for a market that’s been a key factor in Apple’s growth plans, going forward. That marks a drop from 12.9 to 11.5 percent of the market. Last month Tim Cook highlighted some of the reasons for the drop in the world’s largest smartphone market.

Among the reasons cited are international trade tensions and an overall slowing Chinese economy. Of course, Apple’s not alone in seeing a decline. Smartphone shipments are down almost across the board, owing to slower upgrade cycles. Most phones are already pretty good, so people are holding onto them for longer. It’s also worth noting that this year’s XS didn’t mark as dramatic an upgrade as its predecessor. 

Tellingly, however, a number of native smartphone makers are up in the country, including, notably, Huawei, which saw a 23.3 percent uptick for the quarter, suggesting that the ascendent company ate into Apple’s market share.



from iPhone – TechCrunch https://tcrn.ch/2N2fC41

New figures highlight the iPhone’s rough quarter in China

When Apple issued revised guidance for its quarterly earnings last month, the company singled out China as a primary driver for its disappointing result. Sure enough, iPhone revenue declined 15 percent year over year, and now IDC’s got some more insight into the role the Chinese market may have played in that decline.

New figures out this week show right around a 20 percent dip in shipments in China y-o-y for the quarter. That’s a pretty dramatic drop for a market that’s been a key factor in Apple’s growth plans, going forward. That marks a drop from 12.9 to 11.5 percent of the market. Last month Tim Cook highlighted some of the reasons for the drop in the world’s largest smartphone market.

Among the reasons cited are international trade tensions and an overall slowing Chinese economy. Of course, Apple’s not alone in seeing a decline. Smartphone shipments are down almost across the board, owing to slower upgrade cycles. Most phones are already pretty good, so people are holding onto them for longer. It’s also worth noting that this year’s XS didn’t mark as dramatic an upgrade as its predecessor. 

Tellingly, however, a number of native smartphone makers are up in the country, including, notably, Huawei, which saw a 23.3 percent uptick for the quarter, suggesting that the ascendent company ate into Apple’s market share.



from Apple – TechCrunch https://tcrn.ch/2N2fC41

Apple partners with VA to bring Health Records to veterans

Apple announced this morning it has partnered with the U.S. Department of Veterans Affairs (VA) to make the Health Records feature on iPhones available to veterans. The deal will allow the veterans to view their medical information across participating institutions, including the VA, organized in the Apple Health app.

These health records include allergies, conditions, immunizations, lab results, medications, procedures and vitals, and will be displayed alongside other information, like Apple Watch data. This gives VA patients a more comprehensive view of their medical history and health data, Apple says.

The medical information is also secured through encryption and protected by the iPhone user’s passcode, Touch ID or Face ID.

Apple was reported to be in discussions with the Department of Veterans Affairs about this deal back in November of last year. At the time, it was said that in addition to the health record integration on iPhones, Apple would provide engineering support to the agency.

The partnership is a big win Apple, as it provides the iPhone maker a means of reaching the over 9 million veterans currently enrolled in the VA’s system across 1,243 facilities. It also represents another success by the company in terms of getting health care institutions to support its health records feature on iPhone. Today, that list includes a growing number of hospitals and clinics, across the U.S.

The Health Records feature on the iPhone will be the first record-sharing platform like this available the VA, Apple also noted,

“We have great admiration for veterans, and we’re proud to bring a solution like Health Records on iPhone to the veteran community,” said Tim Cook, Apple CEO, in an announcement about the new partnership. “It’s truly an honor to contribute to the improved healthcare of America’s heroes.”

“When patients have better access to their health information, they have more productive conversations with their physicians,” added Jeff Williams, Apple’s COO. “By bringing Health Records on iPhone to VA patients, we hope veterans will experience improved healthcare that will enhance their lives.”

A number of tech companies over the years have tried to offer platforms for centralizing health records, but have faced challenges because of the fragmentation across the industry as well as other technical challenges. Google Health, for example, closed down in 2011 after failing to gain traction. To combat these issues, Apple has been putting together individual deals with various institutions to get them to support the Health app, following its early 2018 launch. However, the partnership with the VA is one of Apple’s most significant deals to date.



from iPhone – TechCrunch https://tcrn.ch/2RWajnE

Apple partners with VA to bring Health Records to veterans

Apple announced this morning it has partnered with the U.S. Department of Veterans Affairs (VA) to make the Health Records feature on iPhones available to veterans. The deal will allow the veterans to view their medical information across participating institutions, including the VA, organized in the Apple Health app.

These health records include allergies, conditions, immunizations, lab results, medications, procedures and vitals, and will be displayed alongside other information, like Apple Watch data. This gives VA patients a more comprehensive view of their medical history and health data, Apple says.

The medical information is also secured through encryption and protected by the iPhone user’s passcode, Touch ID or Face ID.

Apple was reported to be in discussions with the Department of Veterans Affairs about this deal back in November of last year. At the time, it was said that in addition to the health record integration on iPhones, Apple would provide engineering support to the agency.

The partnership is a big win Apple, as it provides the iPhone maker a means of reaching the over 9 million veterans currently enrolled in the VA’s system across 1,243 facilities. It also represents another success by the company in terms of getting health care institutions to support its health records feature on iPhone. Today, that list includes a growing number of hospitals and clinics, across the U.S.

The Health Records feature on the iPhone will be the first record-sharing platform like this available the VA, Apple also noted,

“We have great admiration for veterans, and we’re proud to bring a solution like Health Records on iPhone to the veteran community,” said Tim Cook, Apple CEO, in an announcement about the new partnership. “It’s truly an honor to contribute to the improved healthcare of America’s heroes.”

“When patients have better access to their health information, they have more productive conversations with their physicians,” added Jeff Williams, Apple’s COO. “By bringing Health Records on iPhone to VA patients, we hope veterans will experience improved healthcare that will enhance their lives.”

A number of tech companies over the years have tried to offer platforms for centralizing health records, but have faced challenges because of the fragmentation across the industry as well as other technical challenges. Google Health, for example, closed down in 2011 after failing to gain traction. To combat these issues, Apple has been putting together individual deals with various institutions to get them to support the Health app, following its early 2018 launch. However, the partnership with the VA is one of Apple’s most significant deals to date.



from Apple – TechCrunch https://tcrn.ch/2RWajnE