Snippings

I don’t think we have a Minister for the Internet (do we?) so it falls under the capable purview of Baroness Morgan of Cotes. The Baroness has introduced a new bill into the House of Lords

xxx

his proposed new law that would pave the way for a statutory duty of care requiring Facebook, YouTube and other tech firms to do more to protect children from online harms.

From Duty of care bill to be introduced in the Lords amid fears the Government’s plans could be delayed for a year:

 

xxx

xxx

In 2018, Facebook made 16.8 million reports of child sexual exploitation and abuse content to the NCMEC.
The National Crime Agency said this had led to more than 2,500 arrests and 3,000 children made safe.

From NSPCC urges Facebook to stop encryption plans – BBC News:

xxx

 

NCMEC [the US National Center for Missing and Exploited Children],

 

xxx

 

But, the NCMEC estimates, if Facebook implements end-to-end encryption, it could mean 70% of these vital reports are lost.

 

From NSPCC urges Facebook to stop encryption plans – BBC News:

 

 

xxx

 

But what actually could be done? Suppose a teenager is approached “out of the blue” on Facebook by an older person — let’s say, the Scottish Finance Minister, for example — what difference would it make whether the messages are encrypted or not? Is Facebook really going to read every message sent to someone under 18 (or 21, or 13 or whatever) and feed these messages into an AI that is going to try to work out whether messages are a) ok, b) creepy but perfectly legal or c) against the law?

xxx

Texas Capital Bank, has launched Bask Bank, a digital savings account that earns American Airlines AAdvantage miles instead of interest.

From Texas Capital launches digital savings bank that pays air miles ins…:

xxx

xxx

In a statement published today, Twitter disclosed a security incident during which an unknown attacker exploited the company’s official API (Application Programming Interface) to match public usernames with users’ phone numbers.

Twitter said the attack took place on December 24, 2019, and the attacker used a large network of fake accounts to exploit its API.

From Twitter says an attacker used its API to match usernames to phone numbers | ZDNet:

xxx

xxx

Pim Techamuanvivit, the owner and chef of a few popular restaurants in San Francisco, was managing the floor at Kin Khao the other night when a call came in from someone asking about their delivery order. This was surprising to her, since her restaurant doesn’t do delivery – not even takeout. After hanging up the phone, she googled “Kin Khao delivery” and found something astonishing: a complete impersonation of their menu and brand, complete with delivery ordering, on Seamless, Grubhub and Yelp.

From Counterfeit Food – alexdanco.com:

xxx

xxx

You may have heard of “honey laundering”, when cheaper Chinese honey gets mixed in and sold as North American honey in order to evade tariffs.

From Counterfeit Food – alexdanco.com:

xxx

xxx

The Rijksmuseum Twenthe in Enschede, the Netherlands, was in the midst of a months-long email negotiation with dealer Simon C. Dickinson to purchase a prized John Constable painting when hackers hijacked the exchange, posing as Dickinson and convincing the museum to funnel the money into a Hong Kong bank account.

Now the museum is attempting to sue Dickinson, claiming the dealer should have known about the fraud, according to Bloomberg.

In a London commercial court this morning, Gideon Shirazi, a lawyer representing the museum, argued that negligence on the part of the dealer’s team allowed the thieves to steal the museum’s money.

Dickinson’s lawyer, Bobby Friedman, said the museum should have independently confirmed the legitimacy of the bank account before wiring the money, adding that his client, a specialist in Old Master paintings, was never aware any fraud was taking place. Each side is accusing the other of having been hacked.

From A Hacker Posing as a Venerable British Art Dealer Swindled a Dutch Museum Out of $3.1 Million | artnet News:

xxx

xxx

We would expect all the finance-industry activity to drive the price of the Pound up much higher than it otherwise would be, and therefore to push United Kingdom-based Industrial activity right out of the United Kingdom, regardless of any Euro-based shenanigans. This also matches with the observation that, economically-speaking, the United Kingdom has become a one-city nation (London, i.e. Finance), with prior hubs of maritime trade and/or manufacturing fallen to irrelevance (Liverpool, Birmingham, Manchester, etc., don’t follow those links if you’re in a cheery mood).[8]

From Essays | Conrad Bastable:

xxx

xxx

The new bank obviously needs to comply with regulation. In the US, this is most often achieved by finding a sponsoring bank partner. (This tactic is much faster and has a higher likelihood of success than applying for a license.) A regulated bank agrees to “lend” the new bank its license in exchange for a financial cut of whatever the new bank is offering. Typically, that means the sponsoring bank gets more deposits without having to pay to acquire those customers.

From Banking on the Future: Why our most hated institutions will become our most beloved:

xxx

xxx

The decision of AA v Persons Unknown & Ors, Re Bitcoin [2019] EWHC 3556 (Comm) of the English High Court provides some hope that in the right case, some of the ransom could be recovered.

The facts

The customer of an English insurer (who chose to remain anonymous) suffered a ransomware attack in which their data and systems were encrypted and a Bitcoin ransom payment was demanded. The Insurer, after some negotiation, agreed to pay the ransom in exchange for a decryption tool. The payment was about $950,000. After the ransom was paid, the Insurer investigated whether it could be recovered. While some of the Bitcoin had been transferred into untraceable legal tender, a substantial portion of the Bitcoin could still be traced to a specific Bitcoin address. This address was linked to an exchange platform called Bitfinex operated by two of the Defendants in the case. The other two Defendants were the unknown persons who demanded the ransom and the unknown controllers of the Bitcoin address. The Insurer sought a proprietary injunction over the traced Bitcoin as the first step in recovering the ransom payment.

The decision

Fundamentally, the Court decided that crypto assets such as Bitcoin are considered to be ‘property’ capable of being the subject of a proprietary injunction. The Judge also decided that the test for a proprietary injunction was satisfied for the purposes of interim relief which included addressing the serious fraud issue that was to be tried and the traceability of the fraudulent recipient of the Bitcoin.

From High Court grants proprietary injunction over Bitcoin cyber ransom payment to a third party | RPC:

xxx

As Angela Strange said at the Andressen-Horowitz summit in November 2019, “in the not-too-distant future, I believe nearly every company will derive a significant portion of its revenue from financial services“.