From Digital Age to Nano Age. WorldWide.

Tag: Protection

Robotic Automations

UK data protection watchdog ends privacy probe of Snap's GenAI chatbot, but warns industry | TechCrunch


The U.K.’s data protection watchdog has closed an almost year-long investigation of Snap’s AI chatbot, My AI — saying it’s satisfied the social media firm has addressed concerns about risks to children’s privacy. At the same time, the Information Commissioner’s Office (ICO) issued a general warning to industry to be proactive about assessing risks to […]

© 2024 TechCrunch. All rights reserved. For personal use only.


Software Development in Sri Lanka

Robotic Automations

Google expands passkey support to its Advanced Protection Program ahead of the US presidential election | TechCrunch


Ahead of the U.S. presidential election, Google is bringing passkey support to its Advanced Protection Program (APP), which is used by people who are at high risk of targeted attacks, such as campaign workers, candidates, journalists, human rights workers, and more.

APP traditionally required the use of hardware security keys, but soon users can enroll in APP with passkeys. Users will have the option to use passkeys alone, or alongside a password or hardware security key.

“In a critical election year, we’ll be bringing this feature to our users who need it most, and continue to work with experts like Defending Digital Campaigns, the International Foundation for Electoral Systems, Asia Centre, Internews, and Possible to help protect global high-risk users,” Google’s VP of Security Engineering, Heather Adkins, said in a blog post.

Google says passkeys have been used to authenticate users more than one billion times across over 400 million Google Accounts since the company launched passkey support in 2022. Google says passkeys are used on Google Accounts more often than legacy forms of two-step verification, such as SMS one-time passwords and app-based one-time passwords combined.

Passkey logins make it harder for bad actors to remotely access your accounts since they would also need physical access to a phone. Passkeys also remove the need to rely on username and password combinations, which can be susceptible to phishing.

The technology has been adopted by numerous other companies, including Apple, Amazon, X (formerly Twitter), PayPal, WhatsApp, GitHub and TikTok.

Google also announced that it’s expanding its Cross-Account Protection program, which shares security notifications about suspicious activity with the third-party apps you’ve connected to your Google account. The company says this helps prevent cybercriminals from gaining access to one of your accounts and using it to infiltrate others. Google notes that it’s protecting 2.4 billion accounts across 3.4 million apps and sites and that it’s growing its collaborations across the industry.


Software Development in Sri Lanka

Robotic Automations

A pair of Airbnb alums is bringing intelligence and automation to data protection | TechCrunch


When Julie Trias and Elizabeth Nammour were working together at Airbnb on the company’s data team, they had to deal with data spread across a variety of sources, and that growing sprawl led to challenges in keeping data safe. The founders’ own frustration with the existing crop of data protection options motivated them to launch a company and build the automated data protection tool they wanted.

On Tuesday, that startup, Teleskope, announced a $5 million seed investment.

“We tested a bunch of different tools to help us understand, protect, delete and redact data at Airbnb, but what we came to realize is that there wasn’t that tool that could help developers do this automatically,” Trias told TechCrunch.

That’s not to say there were no solutions, but the ones that existed like data classification tools generated a lot of false positives and had scaling issues. “There wasn’t a tool that could help you go from detection to actual remediation, which is redacting the data, isolating the data, or taking any sort of action on the data.” The solution Teleskope has built enables customers to connect to their various data sources, identify sensitive data across a variety of data stores in an automated way, and isolate or delete it when necessary.

They currently have a few different use cases: “We’re mainly now selling to data teams, not just a product developer, but data governance engineers, who want to clean up their entire data sets in their data warehouse, or they want to clean one data set before they use it for model training, or they have multiple data sets, and they need to delete data for a particular user for compliance purposes,” she said.

The solution relies on what Trias calls “a pipeline of models” with different ones coming into play, depending on the type of data. “So for example, we’ve trained a model that’s really good at classifying data in natural language like conversational types of files. We’ve trained a model that works really well with structured tabular types of formats. We’ve trained a model that can classify sensitive data in a code base file or a log file,” she said.

Trias says that in spite of having the background and pedigree to build a product like this, they weren’t well versed in the world of venture capital and how to pitch when they first launched the company — and female founding teams face a bigger challenge with investors in general. “I think the hardest part was that when we first started making VC calls, we had no idea how to go about it. We didn’t even know what a design partner was. We were pre-product, pre anything, and we didn’t know all the VC lingo. And so we were very unprepared when we first took our first meetings with VCs,” she said.

They refined their presentation over time, and were able to find investors who got them and their vision. The seed funding was led by Primary Venture Partners with participation from Lerer Hippeau and Plug and Play Ventures along with Essence VC, which led the company’s pre-seed round.


Software Development in Sri Lanka

Robotic Automations

DuckDuckGo launches a new subscription to bundle VPN and identity theft protection | TechCrunch


Privacy-focused consumer tech company DuckDuckGo launched a new Privacy Pro subscription on Thursday that bundles a VPN service, personal information removal and identity theft restoration.

The plan, which costs $9.99 per month or $99 per year, is currently available only to people in the U.S. This is the company’s first move toward a subscription service built into the DuckDuckGo browser.

DuckDuckGo has been profitable since 2014, but has so far relied on ad revenue. The subscription service opens up a new avenue for the company to make money.

Image Credits: DuckDuckGo

The VPN uses the open source WireGuard protocol to protect your identity while you visit different sites on the web. The company said that all DNS queries are also routed through DuckDuckGo’s own DNS resolvers, so internet service providers (ISPs) can’t snoop on your browsing history.

With its personal information removal service, DuckDuckGo scans dozens of data broker sites to find details like your name and address. If the service finds your details on any of these sites, it requests removal and also handles email correspondence with them.

Image Credits: DuckDuckGo

The company says that this feature builds on Removaly’s tech, a startup DuckDuckGo acquired in 2022. (At that time, Removaly’s founder, Kyle Krzeski, posted on X that a privacy company acquired the startup without naming it.)

The third feature of DuckDuckGo’s privacy pro plan is identity theft restoration, where an advisor would help you recover your identity-related loss around the clock. This includes financial losses, fixing credit reports by even freezing the report until identity is restored, and replacing and canceling items like driver’s licenses, bank cards, and passports. The company said that the recovery agent would work with you, deal with all the formalities, and follow up with various companies.

Image Credits: DuckDuckGo

DuckDuckGo says that to ensure user privacy, it maintains no logs of users’ VPN activity, stores data provided during personal information removal on the local device and the company assigns a random ID when users sign up for the Privacy Pro service.

Earlier this year, DuckDuckGo added cross-device syncing for passwords and bookmarks for easy access to this information.

Earlier this year, court filings in the U.S. Department of Justice vs. Google revealed that DuckDuckGo accounted for only 2.5% of general search queries in the U.S. in 2021 and between 0.5% to 2.5% in Europe in 2023.




Software Development in Sri Lanka

Robotic Automations

Consumer Financial Protection Bureau fines BloomTech for false claims | TechCrunch


In an order today, the U.S. Consumer Financial Protection Bureau (CFPB) said that BloomTech, the for-profit coding bootcamp previously known as the Lambda School, deceived students about the cost of loans, made false claims about graduates’ hiring rates and engaged in illegal lending masked as “income sharing” agreements with high fees.

The order marks the end of the CFPB’s investigation into BloomTech’s practices — and the start of agency’s penalties on the organization.

The CFPB is permanently banning BloomTech from consumer lending activities and its CEO, Austen Allred, from student lending for a period of ten years. In addition, the agency is ordering BloomTech and Allred to cease collecting payments on loans for graduates who didn’t have a qualifying job and allow students to withdraw their funds without penalty — as well as eliminate finance changes for “certain agreements.”

“BloomTech and its CEO sought to drive students toward income share loans that were marketed as risk-free, but in fact carried significant finance charges and many of the same risks as other credit products,” CFPB director Rohit Chopra said in a statement. “Today’s action underscores our increased focus on investigating individual executives and, when appropriate, charging them with breaking the law.”

BloomTech and Allred must also pay the CFPB over $164,000 in civil penalties to be deposited in the agency’s victims relief fund, with BloomTech contributing ~$64,000 and Allred forking over the remainder ($100,000).

Allred founded BloomTech, which rebranded from the Lambda School in 2022 after cutting half its staff, in 2017. Based in San Francisco, the vocational organization — owned primarily by Allred — is backed by various VC funds and investors including Gigafund, Tandem Fund, Y Combinator, GV, GGV and Stripe, and at one time was valued at over $150 million.

Critics almost immediately attacked the firm’s then-pioneering business model — the income share agreement, or ISA — as predatory.

For BloomTech’s short-term, typically six-to-nine-month certification — not degree — programs in fields spanning web development, data science and backend engineering, the school originated income-share loans to fund students’ tuition. (According to the CFPB, BloomTech has originated “at least” 11,000 loans to date.) These loans require that recipients who earn more than $50,000 in a related industry pay BloomTech 17% of their pre-tax income each month until reaching the 24-payment or $30,000 total repayment threshold.

BloomTech didn’t market the loans as such, saying that they didn’t create debt and were “risk free,” and advertised a 71%-86% job placement rate. But the CFPB found these marketing claims and others to be flatly untrue.

BloomTech’s loans in fact carried an annual percentage rate and an average finance charge of around $4,000, neither of which students were made aware of, and a single missed payment triggered a default. The school’s job placement rates were closer to 50% and sank as low as 30%. And, unbeknownst to many students, BloomTech was selling a portion of its loans to investors while depriving recipients of rights they should’ve had under a federal protection known as the Holder Rule.

Prior to the CFPB order, BloomTech, which briefly landed in hot water with California’s oversight board several years ago for operating without approval, had faced other lawsuits claiming the school misrepresented how likely graduates were to get a job and how much they were likely to earn. Last year, leaked documents obtained by Business Insider raised questions about the company inflating its efficacy and hyping up a curriculum that didn’t upskill students at the level they expected.

To comply with the CFPB order, BloomTech must stop collecting payments on loans to graduates who didn’t receive a qualifying job in the past year, and eliminate the finance charge for those who graduated the program more than 18 months ago and obtained a qualifying job making $70,000 or less. The company must also allow current students to withdraw from the program and cancel their loans, or continue in the program with a third-party loan.




Software Development in Sri Lanka

Back
WhatsApp
Messenger
Viber