Insurance For Cybercriminals, or Giant Sting?



Source: Inside Look At Eastern European Vs. East Asian Hackers
While the paywall experiment of the New York Times has received a lot of play in various online forums, one place where a working paywall – meaning that it is both making money for publishers and attracting traffic – is less well known, in the eastern European country of Slovakia. There an independent tech vendor called Piano Media has been successfully experimenting with its own paywall-based system of online publishing. Launched in Bratislava last spring, it gives subscribers online access to content from all nine of Slovakia’s leading news sites. What’s more, it does so for a single flat fee (less than US $4 per month, which is going up in March by 25%) that is paid after visitors have had a chance to sample a certain number of articles for free. Users can pay for their subscriptions by SMS messages, typical of what many can pay for in Europe.
Slovakia is a country with less than six million total population, and the paywall story is covered this week in the Columbia Journalism Review by William Baker here. It is a lesson that others should study carefully. Indeed, the model has worked so well that they have expanded into neighboring Slovenia (and often the two countries are confused by outsiders) earlier this year.
Here are some lessons learned from the experience:
Whether Piano’s national model can work in countries with larger publishing ventures remains to be seen. But in eastern Europe, it appears to be working.
Source: A National Paywall That Works

Source: Was Conficker Stuxnet’s Trojan?

A new study out this week has rekindled an old economics fight: When countries get richer, do they get happier?
For Richard Easterlin, the answer has always been “no.” He became famous in economics circles beginning in the 1970s for articulating his namesake idea, the “Easterlin paradox.” He found that when you compare rich countries to poor countries, the people in the wealthy nations were more satisfied. But when a country’s economic position improved over time, the people in that country didn’t get happier.
“If you look across countries and compare happiness and GDP [gross domestic product] per capita, you find that the higher the country’s income, the more likely it is to be happier,” Easterlin said. “So the expectation based on point-in-time data is if income goes up, then happiness will go up. The paradox is, when you look at change over time, that doesn’t happen.” [LiveScience]
Now Easterlin is back with a new study in the Proceedings of the National Academy of Sciences, one that extends his argument to even more countries.
The new study, Easterlin said, is the broadest finding about the paradox so far. The researchers gathered between 10 and 34 years of happiness data from 17 Latin American countries, 17 developed countries, 11 Eastern European countries transitioning from socialism to capitalism and nine-less developed countries. They found no relationship between economic growth and happiness in any case. Even in a country like China, the researchers wrote, where per capita income has doubled in 10 years, happiness levels haven’t budged. South Korea and Chile have shown similarly astronomical economic growth with no increase in satisfaction. [LiveScience]
Why should this be so? Easterlin’s explanation lies with the idea that one’s expectations for what the good life entails, or “aspirations” as he puts it, don’t rise and fall with the fluctuations of the economy. That is, just because a recession sinks the stock market back to 2004 levels doesn’t mean that you’d be satisfied with the stuff and the quality of life you had then now that you’ve tasted more. Conversely, he argues, an immediate jolt in your pocketbook would inflate your mood, but eventually you’d get used to the new standard of living and come to expect it as your baseline. So, in this hypothetical scenario, your overall affluence rose in the long term but your happiness did not.
That all sounds good in theory. But as long as Easterlin has been advocating his paradox, others have insisted that the effect is not real. One economist in opposition is Justin Wolfers, whose own work finds that opposite: there is a direct connection between economic development and a long-term increase in life satisfaction. You can read Wolfers’ full take at The New York Times’ Freakonomics blog, but in essence he says:
Easterlin’s Paradox is a non-finding. His paradox simply describes the failure of some researchers (not us!) to isolate a clear relationship between GDP and life satisfaction. But you should never confuse absence of evidence with evidence of absence. [The New York Times]
While the economists spar over the data, there is another question: Is the data any good? The researchers use the well-regarded World Values Survey, but the slipperiness of “happiness” is a problem that vexes all who attempt to quantify it and box it up and chart it out on nice little graphs.
Commenting on the new results, Alexander Gorban, a mathematician at the University of Leicester, said it was difficult to quantify happiness because of the problem of comparing material and subjective wellbeing. “Unfortunately, both are very difficult to put in numbers. It is a priori clear that subjective happiness or satisfaction is a very fragile and non-universal concept strongly influenced by cultural and even linguistic intercultural differences. Moreover, the material wellbeing is also not easy to quantify.” [The Guardian]
So we’re not reliable well-being self-reporters. Furthermore, Gorban notes, the studies rely on gross domestic product (GDP) as their indicator of a country’s economic state. But GDP is not necessarily an indicator of an average person’s relative affluence, especially in societies (like, say, the United States) with growing class disparities.
Nevertheless, Wolfers studies have found that there is no satiation point with money and happiness. That is: The more money you already have, the lesser the happiness gain from getting more money. But there is not point, he says, where more money brings zero gains in happiness.
Image: iStockphoto
Source: The Squabble Resumes: Does More Wealth Make a Nation Happier?

In the modern media equivalent of a Greek myth, the Gawker empire was hit hard over the weekend when it was revealed that a hacker group had infiltrated its commenter database via a vulnerability in its source code, exposing the user names and encrypted passwords for over 1.3 million commenters. To further drive the moral of this story home, the group, which goes by the name Gnosis, pulled a dictionary attack and unencrypted about 188K of the easiest ones like “password” or “qwerty” releasing the whole database and source code package in a torrent on Pirate Bay.
Apparently the Gawker data breach was no secret on the Internet and people had offered Gnosis money for the Gawker database before the release. According to a Gnosis representative who gave details to TechCrunch, the group received several offers all in the vicinity of 2K, mostly from spammers and re-salers, “certainly not for good.”
Already Internet nogoodniks are taking advantage of the exploit. AÂ hack-related Twitter attack on Sunday forced users to tweet about the Acai berry diet. TechCrunch Senior Editor Erick Shoenfeld fell prey to what looks like the second iteration of the Acai attack this morning. The New York Post reports that one woman had her entire life “turned upside down“ when her social media accounts were taken over and used to post anti-Semetic messages. Behemoths LinkedIn, Yahoo and World Of Warcraft have all taken measures to protect against further attacks.
Because many people use the same password across multiple sites, this spammer’s delight is going going to get worse before it gets better. Especially if the attacks spread from social media to financial services. It’s time to get an entirely new password if you’ve ever commented on Gawker, for everything, even if your password (like both of mine) is still encrypted in the full_db.txt file. You can check if your information has been exposed here.
When asked why they didn’t accept any of the offers, our Gnosis source replied, “We didn’t sell because we thought that would be too far. It’s one thing finding out that your database was leaked, and its another to find out that it was sold. We are not heartless, we know the implications for selling it, even though a minority of the group wanted to sell it.”
While the Gnosis representative admitted that there are lot of interesting things that can be done with a hacked database, the more serious issue here is the public availability of the PHP source code which leaves open the possibility of further exploits, “Just say if Gawker recovers fully, and all is well, six months down the line some Eastern European hackers jump in and do the whole thing again, because they had access to the source and found a way to exploit it.”
In a comment explaining the breach Gawker founder Nick Denton, who reportedly has a meeting with the FBI today, hinted at hiring an independent security firm to improve security. Not enough says the Gnosis rep, who holds that all the sites’ API keys and cookies are in still in the source code and that while difficult, those with nefarious intent can still impersonate Gawker users, “I would bite the bullet and release all the source code if I were them officially, and go ‘open source.’”
Denton, who is in the unenviable position of being the busiest person in the world at the moment, did not reply to my questions about the measures being taken to further protect users and the ethical implications of such a large breach. He only responded with this link to show that Gawker site traffic hadn’t fallen since the release, when asked about that in an addendum to my first email.
Source: Spammers Were Offering 2K For The Gawker Database. Now They Have It For Free.
Nowadays, Groupon clones are a dime a dozen. Variations of the daily deal concept have been cropping up in in almost all parts of the world as of late, i. e. Russia, China, Japan, Germany, the UK, or in the US itself. But Berlin-based Rebate Networks is taking the idea of copying Groupon to the extreme. As you can see on the map below, the company needed a mere eight months to cover three continents with a total of 29 local Groupon clones.
Very quietly, Rebate Networks either helped to set up or invested in existing Groupon-like sites in South America (four different countries), Europe (17 countries) and East Asia (eight countries). The entire portfolio is listed up here and was just made public for the first time.
What’s interesting about this strategy (apart from the speedy execution) is that the Germans are focusing on relatively small and high-growth markets Groupon proper hasn’t entered so far, for example with Notelapierdas in Argentina, Ensogo in the Philippines, or Kolektiva in Croatia (in addition to bigger markets, i.e. China, Germany, and the UK).
And it looks as if Rebate Networks are very successful with their copy-and-deploy-fast-worldwide approach. Co-founder Stefan Glaenzer tells me his company is actually still expanding, having just invested US$1 million each in Groupon clones dealkeren in Indonesia and NhomMua in Vietnam.
Glaenzer and his partner (and CEO) Michael Brehm also say Rebate Networks’ portfolio companies are currently leading in all South East Asian countries they operate in (more info here), “most” of the Eastern European countries, and in China (where his company owns a minority stake in Lashou).
Groupon proper is leading in Japan and Germany (where Rebate Networks’ clones Piku and Daily Deal are said to be the No. 2 players). Groupon entered those markets by buying local clones, and it’s obvious buy-outs are what Rebate Networks ultimately aims for with its portfolio companies, too. (Another German-led Groupon clone factory called “Group Buying Global”, which is following a very similar strategy, could spoil the plan in some cases though).
In the meantime, watch what Groupon CEO Andrew Mason thinks of clones here.
Source: Rebate Networks: Meet The Company That Cloned Groupon In 29 Countries
Orome1 writes “Nineteen people were arrested yesterday in the UK and are suspected of being part of an Eastern European gang that used the ZeuS Trojan to steal online banking credentials from unsuspecting victims and syphon around £2 million per month to their accounts.”
Wired’s Threat Level has a piece on a Bank of America employee, Rodney Reed Caverly, who has been charged with installing malware on ATMs in North Carolina. Caverly, who worked on the bank’s IT staff, allegedly withdrew cash untraceably from the ATMs over a period of 7 months last year. “The charges were filed the same day that credit card company Visa warned the banking industry that Eastern European ATM malware recently showed up in America for the first time. That code, initially spotted last year on some 20 ATMs in Russia and Ukraine, was designed primarily to capture PINs and bank card magstripe data, but also allowed thieves to instruct the machine to eject whatever cash was still in it… At least 16 versions of the East European malware have been found so far and were designed to attack ATMs made by Diebold and NCR, according to the April 1 Visa alert. There is no information tying the malware found in Russia with the malware allegedly used by Caverly.”