Marriott now says 5 million unencrypted passport numbers were stolen in Starwood hotel data breach

Starwood’s data breach just got both better and worse at the same time.

Marriott, which owns hotel chain giant Starwood, said it has revised the number of customers affected by its recently disclosed data breach from 500 million to “fewer than 383 million unique guests.” That doesn’t mean all those 383 million guests are affected, Marriott said, but the hotel giant still can’t yet give a more precise number of customers whose data was stolen.

The bad news is that the company confirmed that more than five million unencrypted passport numbers were stolen, on top of the more than 20 million encrypted passport numbers.

That might be a problem, given passport numbers can be used for identity theft and to commit fraud, but is the sort of data that remains highly valuable for spy agencies that can use the information to track down where government officials, diplomats and adversaries have stayed — giving insight into what would ordinarily be clandestine activities.

Marriott also said that 8.6 million unique payment card numbers were taken, but only 354,000 cards were active and unexpired at the time of the breach in September.

The hotel giant said it had “no evidence” to show that the hackers stole the keys needed to decrypt the data, but did not say how it came to that conclusion.

Starwood’s security lapse became the largest data breach last year, and remains one of the most damaging hacking incidents in recent memory. The company said the contents of the stolen data were from the Starwood guest reservation database, which it acquired when it bought Starwood and its 1,200 properties in 2016 for $13 billion.

Marriott said in its Friday update that it has “completed the phase out” of Starwood’s reservation database and now runs guest bookings through its Marriott database, which was not affected by the breach.


Source: Tech Crunch

HTC had a truly terrible 2018

If you think times are bad at Apple, spare a thought for HTC, the once king-of-the-hill phone maker that continues to struggle very badly.

The Taiwanese smartphone company, which offloaded a portion of its business to Google for $1.1 billion and is pivoting to VR, laid off yet more staff in 2018 and had its worst year of sales ever.

According to its own figures — and as noted by Bloomberg’s Tim Culpan — the company brought in just 23.74 billion TWD ($770 million) in revenue over the entire year. That’s the first time it has grossed less than $1 billion during a year as a public company.

That figure represents a massive 62 percent drop on HTC’s paltry revenue for 2017 — 62.12 billion TWD, around $2 billion — which was its poorest year since 2005. We don’t yet know the total loss for 2018, but its three previous quarterly reports combined amount to a total operating loss of 11.13 billion TWD, $361 million, with one more quarter to add.HTC’s 2018 total was so bad that it actually made more money during just one single month a few years ago. Its total revenue during May 2013, back when phones like the One M7, One Mini and One Max made it one of the best smartphone companies on the planet, came in at 29 billion TWD.

Those days of booming sales are, of course, long gone as these charts painfully illustrate.

The decision to sell a large chunk of the smartphone business to Google one year ago was the icing on the cake served at HTC’s smartphone wake. Yes, the company did announce the U12+ — with a squeezable side — in May and it is working on a blockchain phone that we kind of got a look at during our Shenzhen event last year, but these are peripheral plays that are tucked well away from where the mainstream players are dueling, a place where HTC used to be.Even VR, trumpeted as HTC’s great area of hope, is a long-term play.

The company doesn’t break down revenue — that’ll come later when it releases its next earnings report in February — so we don’t know how its Vive and other virtual reality plays are working out in terms of numbers. But the immediate future isn’t great.

Lucas Matney — TechCrunch’s resident virtual reality cyberpunk — noted just this week that 2019 is shaping up to be a very testing year for the entire VR and AR industry, HTC/Vive very much included.

“There are plenty of reasons to be long-term bullish on AR, but the time horizons some have espoused seems to be bogus and pitch decks organized around a near-term spike in phone-based or glasses-based users are going to have a tougher time being taken seriously in 2019,” Matney wrote.

If that proves true, HTC’s sickly sales may well contract further still.

In many ways, it’s hard to not feel sorry for the company. Pivots this brutal are usually carried out by private startups who can keep the contents of their books to themselves, rather than 22-year-old public companies that must file financial statements. Unfortunately for HTC, information like monthly sales, losses and other revealing data will continue to be public information, ensuring that this painful transition continues to play out with full public scrutiny.

Despite an incredible downturn in success, co-founder, president and CEO Cher Wang continues to run the business with no calls for a change in leadership. Wang keeps a low profile and has said little of her plans to turn things around. Maybe 2019 is a good year for being more forthcoming, especially if the losses continue to mount, as seems inevitable.


Source: Tech Crunch

Amazon debuts Showroom, a visual shopping experience for home furnishings

Amazon just over a year ago launched its first in-home furniture brands, with private labels Rivet and Stone & Beam. This past fall, it began experimenting with a new, more visual way to shop for furniture and other merchandise with its Pinterest-like recommendation service Scout. Now, Amazon is venturing further into home furnishings with the debut of Amazon Showroom, a visual design tool that allows you to place furniture into a virtual living room, customize the décor, then shop the look.

The retailer didn’t formally announce the launch of Amazon Showroom, but a spokesperson confirmed it’s a recent test that’s now available on Amazon.com and in the Amazon mobile app.

You can access it from the “Accounts & Lists” drop-down on the web; the Home, Garden & Pets department on the web; or the Home & Kitchen department on the mobile app.

Currently, the new feature is focused on helping Amazon shoppers put together a living room. In a virtual setting, you can make adjustments to the wall color and the flooring, then swap out each item in the space with one of your own choosing — including the sofa, coffee table, chair, end table, lamp, rug and even the art on the wall.

To do so, click on the piece in question, then pick another from the right-side panel where a scrollable list of options are available, along with their prices. This selection can be filtered by a number of factors, as well, like price, style, color, material, brand and star rating.

Not surprisingly, Amazon’s own home furnishing brands are heavily featured here.

As you work on your project, you can save your room design to pull up later. And you can save more than one room design, if you’re trying to decide between different styles. When satisfied, an “Add to cart” button lets you place all into your cart for checkout with just one click.

Amazon Showroom — a name that’s almost a cruel reference to Amazon’s ability to turn brick-and-mortar stores into showrooms for online shoppers — isn’t the retailer’s first attempt at helping shoppers visualize items in their home ahead of purchase. The company also launched an AR shopping feature in its app in 2017, which allows you to place a virtual item in your camera view to see how it goes in your own room. That can be useful if shopping for a single item, but less so when designing a complete room.

Home furnishings is still an emerging category for online retail, not only because they’re hard to visualize, but also because heavy items are expensive to ship. However, major retailers see the potential in this growing market.

Walmart, for example, launched a new home shopping site for furniture and décor last year, which features its own in-house brands and more visual, editorial-style imagery. It has also snapped up other home furnishing and décor retailers, including Hayneedle and recently, Art.com, and is building its own visual search.

Amazon confirmed the launch of Showroom in a statement.

The retailer wouldn’t say when the feature debuted, exactly, but a Twitter account was tweeting links to a pre-production site earlier in December. Amazon confirmed that Amazon Showroom was built entirely in-house.

“Amazon Showroom is a new way for customers to visualize their home furnishing purchases when shopping online,” a spokesperson told TechCrunch. “Amazon Showroom presents customers with a virtual living room, where they can customize the décor and furniture selection providing the ability to visually compare to scale representations of furniture items together in a room to determine how an item will fit with the style of a room and work with other complimentary pieces. The result is a photorealistic rendering of a room that answers the question: ‘How will this all look together?’,” they said.

The feature is live for all customers on the web and in the Amazon app.

Update, 1/4/19, 1:50 PM ET with confirmation from Amazon that Showroom was built in-house.


Source: Tech Crunch

DiscountMugs.com says four months of customer credit cards stolen by hackers

DiscountMugs.com, a large online custom mug and apparel store, had a four-month-long data breach just before the busy Christmas holiday season.

The company said in a letter to state attorneys general that hackers siphoned off credit card numbers from customers who made orders through its site between August 5 and November 16, 2018 using code injected on the company’s payments page.

The malicious card skimming code was removed from the site after it was discovered.

According to the letter, the hackers stole credit card numbers, the security code and expiration date, as well as names, addresses, phone numbers, email addresses and ZIP codes — everything that someone might need to make fraudulent payments.

But the company didn’t say how many people were affected by the breach. It’s believed to be thousands of customers who made purchases through the site during the four-month period.

TechCrunch reached out to Sai Koppaka, chief executive of parent company Bel USA, who did not respond to a request for comment, nor did the company’s spokesperson. Emails sent to Comvest, a private equity firm and an investor in Bel USA, also went unreturned.

DiscountMugs.com might not be a household name, but it ranks in the top 10,000 sites in the U.S., according to Alexa, bringing in thousands of customers every day.

The company becomes the latest in a line of websites affected by credit card skimming code. The so-called Magecart group of hackers have targeted thousands of sites in the past few years, scraping credit card data when a customer enters their information at the checkout and silently sending it on to the hackers’ servers.

Other big-name companies were hit, including British Airways, Newegg and Ticketmaster.


Source: Tech Crunch

3D printed gun activist Cody Wilson indicted for sexual assault

The State of Texas has indicted Cody Wilson, a 3D printed gun rights activist who fought to allow makers post and print guns, of sexual assault after he had sex with a 17-year-old girl he met on a site called SugarDaddyMeet.com. The indictment, posted on Ars, notes that he faces “four counts of sexual assault of a child, two charges of indecency with a child by contact, and two charges of indecency with a child by exposure.”

The charges are punishable by up to 20 years in prison and a $10,000 fine. His company, DefenseDistributed, has dumped him as founder. The affidavit on the crime said Wilson used the name Sanjuro on the site and that he paid the 17-year-old $500 for sex.

Wilson is out on $150,000 bond and not yet in jail. He rose to prominence for supporting 3D printed guns as far back as 2013, causing a panic that reduced interest in the 3D printing industry and led to a court decision in July that found 3D printed gun plans to be legal.


Source: Tech Crunch

Cruise and DoorDash to test food delivery using self-driving cars in San Francisco

Cruise is partnering with DoorDash to pilot food and grocery delivery in San Francisco using self-driving vehicles.

The companies announced Thursday that the testing program will begin in early 2019 with an initial focus on the San Francisco market.

“Delivery is a significant opportunity for Cruise as we prepare to commercialize our autonomous vehicle technology and transform transportation,” said Dan Ammann, who became CEO of Cruise late last year. “Partnering with DoorDash will provide us with critical learnings as we further our mission to deliver technology that makes people’s lives better and more convenient.” Cruise co-founder Kyle Vogt stepped down as CEO and now holds the CTO position at the company.

The program will be available to select DoorDash customers, who will be able to receive deliveries from restaurants via a Cruise autonomous vehicle. The partnership will also explore grocery fulfillment via Cruise vehicles for select grocers already partnered with DoorDash.

“We see autonomous vehicles playing a major role in the future of delivery as consumer behaviors continue to shift online, and we are confident Cruise’s leading technology will help us scale to meet growing consumer demand,” DoorDash CEO Tony Xu said in a statement.

The pilot program adds an interesting twist to Cruise’s plans to launch a self-driving ride-hailing service in 2019. The partnership with DoorDash could be viewed as a way for Cruise to perfect its tech and how it can be used in different ways, particularly how it interacts with people.


Source: Tech Crunch

Apple’s App Store pulled in $1.22B over the holidays plus a record $322M on New Year’s

Apple today is sharing some good news in the wake of yesterday’s reveal of a significant, market-moving cut to its revenue forecast, attributed to declining iPhone sales in China’s slowing economy. The company says its App Store, at least, was having a good holiday. This year, customers spent $1.22 billion during the 2018 holiday season and broke a new single-day record on New Year’s Day.

The $1.22 billion in App Store spending occurred between Christmas Eve and New Year’s Eve, Apple said. This is typically the peak season for App Store consumer spend, as customers load up new iPhones and iPads with apps, and use their App Store Gift Cards to buy paid apps and games.

Apple also said customers spent more than $322 million on New Year’s Day 2019, which set a new record for single-day spend.

Over the holidays, games and self-care apps were the most popular categories, with Fortnite and PUBG among the most downloaded games, along with Brawl Stars, Asphalt 9 and Monster Strike, Apple said.

Meanwhile, as the New Year kicks off, customers are now turning to health and fitness apps, educational apps and productivity apps — likely to some extent inspired by their New Year’s resolutions. The apps leading these categories include 1Password, Sweat and Luminosity.

Last year, Apple also announced a record-breaking holiday season, with $890 million spent during the week of Christmas Eve and $300 million on New Year’s Day 2018.

Apple CEO Tim Cook, in his letter yesterday, signaled that the App Store remains one of the bright spots in the company’s “Services” category, even as he delivered the crushing news of a slowdown in iPhone sales.

The company said it is now expecting $84 billion in the quarter that ended Saturday, down from its earlier estimate of $89 billion to $93 billion. However, “Services” generated more than $10.8 billion in revenue during the quarter, with each geography hitting a new quarterly record. The company noted, too, it’s still on track to achieve its goal of doubling the size of this business from 2016 to 2020.

Today, Apple said the “Services” business set all-time records beyond the App Store in Apple Music, Cloud Services, App Pay and the App Store’s search ad business.

A record-breaking end of the year for the App Store shouldn’t come as a surprise, given that the overall app economy is continuing to grow, with mobile games still driving revenues and the subscription app business also making gains. App Annie recently predicted app stores will surpass $122 billion globally in 2019, including the App Store, Google Play and third-party Android app stores in China, combined.

Prior to Apple’s report, app store intelligence firm Sensor Tower had last week noted that the U.S. App Store broke spending records on Christmas, with a record of $54 million on that day alone — up 31 percent over the year before. It had also passed the $52 million spent on Black Friday 2018, the firm said.

Apple typically releases an App Store holiday report at this time of the year, so its release today isn’t necessarily an attempt to create good press a time when its stock is crashing. But given Apple’s usual attempts at spin, it may be seen that way.


Source: Tech Crunch

Scratch 3.0 is now available

The only kids’ programming language worth using, Scratch, just celebrated the launch of Scratch 3.0, an update that adds some interesting new functionality to the powerful open-source tool.

Scratch, for those without school-aged children, is a block-based programming language that lets you make little games and “cartoons” with sprites and animated figures. The system is surprisingly complex, and kids have created things like Minecraft platformers, fun arcade games and whatever this is.

The new version of scratch includes extensions that allow you to control hardware, as well as new control blocks.

Scratch 3.0 is the next generation of Scratch – designed to expand how, what, and where you can create with Scratch. It includes dozens of new sprites, a totally new sound editor, and many new programming blocks. And with Scratch 3.0, you are able to create and play projects on your tablet, in addition to your laptop or desk computer.

Scratch is quite literally the only programming “game” my kids will use again and again, and it’s an amazing introduction for kids as young as pre-school age. Check out the update and don’t forget to share your animations with the class!


Source: Tech Crunch

Cloudera and Hortonworks finalize their merger

Cloudera and Hortonworks, two of the biggest players in the Hadoop big data space, today announced that they have finalized their all-stock merger. The new company will use the Cloudera brand and will continue to trade under the CLDR symbol on the New York Stock Exchange.

“Today, we start an exciting new chapter for Cloudera as we become the leading enterprise data cloud provider,” said Tom Reilly, chief executive officer of Cloudera, in today’s announcement. “This combined team and technology portfolio establish the new Cloudera as a clear market leader with the scale and resources to drive continued innovation and growth. We will provide customers a comprehensive solution-set to bring the right data analytics to data anywhere the enterprise needs to work, from the Edge to AI, with the industry’s first Enterprise Data Cloud.”

The companies describe the deal as a “merger of equals,” though Cloudera stockholders will own about 60 percent of the equity in the company.

The combined company expects to generate more than $720 million in revenue from its 2,500 customers that rely on it to help them manage the complexities of processing their data. While Hadoop itself is open source and freely available, Cloudera and Hortonworks abstract away most of the infrastructure. Both focused on slightly different markets, though, with Hortonworks going after a more technical user and a pure open-source approach, while Cloudera also offered some proprietary tools.

“Together, we are well-positioned to continue growing and competing in the streaming and IoT, data management, data warehousing, machine learning/AI and hybrid cloud markets,” said Hortonworks CEO Rob Bearden back when the deal was first announced. “Importantly, we will be able to offer a broader set of offerings that will enable our customers to capitalize on the value of their data.”


Source: Tech Crunch

Netflix pleads with people to stop doing the ‘Bird Box’ challenge

Netflix has issued a warning to its customers thanks to a meme challenge that has gone viral in which people are choosing to put blindfolds on and navigate the world around them just like the characters in the horror movie “Bird Box.”

Let the hilarity and the hospital visits begin.

For those who spent the holidays visiting friends and not watching Netflix, here’s a quick summary. Netflix released a horror concept movie called Bird Box starring Sandra Bullock. In Bird Box, Bullock and her children, Boy and Girl, are forced to wear blindfolds and navigate a river and spooky forest to protect themselves against the evil monster that, if seen, causes people to kill themselves.

The movie not only broke viewership records, it inspired a bevy of #BirdBoxChallenge memes, including ones in which folks video themselves blindfolded and attempting to do complete tasks, many of which are depicted in the movie.

Of course, these videos aren’t staying tucked away. They’re being shared with the world on social media. One viral meme shows a blindfolded family paddling away in their bathtub. Another shows a family running through their living room and one managing to hit the wall instead. There are numerous videos of random people walking blindfolded in cities like New York because sure, why not. One person put a hat over his head while driving.

Here’s a sampling.

The morning talk shows got into the mix as well.

Last month, the streaming service announced in a tweet that more than 45 million Netflix accounts had streamed Bird Box, which set a new record for the best-ever first week for a Netflix film.


Source: Tech Crunch