Google Is Planning to Offer Checking Accounts in Partnership With Banks

1.jpg

 

Google is increasingly involved in more areas of its users’ lives. It’s where we turn every day for answers to pretty much everything from simple questions to complicated research. It’s where we get our email, store our photos, manage our calendars, and manage our files. It’s already the most dominant mobile operating system, and it now makes smart home devices. With its purchase of Fitbit, it’s clear Google also wants to dominate wearable technology.

Or, said another way, Google is everywhere.

Now, according to The Wall Street Journal, Google is working on a new project called Cache that involves offering checking accounts. Yes, Google wants to be your bank.

Well, more specifically, Google plans to partner with banks to offer its customers access to banking products like checking accounts. In this case, accounts would be offered by Citigroup, as well as a credit union at Stanford University, and those financial institutions would provide all of the financial services and account management.

Google would provide the convenience, along with loyalty rewards. For example, users would access their accounts through Google Pay, much like Apple’s users access its branded credit card through Apple Pay.

 

Speaking of which, with recent moves by other tech companies into the personal finance space, it was probably inevitable that Google would follow suit. Apple recently introduced its own credit card with Goldman Sachs, and Facebook has announced its plans to launch a digital currency called Libra. It might be worth mentioning that both of those have come under intense scrutiny, with New York regulators launching an investigation into Apple Card for discriminating on the basis of gender when extending credit limits.

I actually think this is less a deviation for Google than it might seem. In fact, as TechCrunch pointed out, by providing users with checking accounts, “Google obviously stands to gain a lot of valuable information and insight on customer behavior with access to their checking account, which for many is a good picture of overall day-to-day financial life.”

It’s helpful to remember that for all the useful services Google provides, the company is, at its core, an advertising platform. That is the underlying business model that makes it huge amounts of money, and it’s the driving force behind every product or service it offers.

And while Google hasn’t suffered the same level of scandal as the next-largest advertising platform, Facebook, the strategy is the same–monetize people’s personal information.

Of course, that lack of scandal is reflected in the fact that consumers say they are more likely to trust Google with their financial information than some of its competitors. Only Amazon was rated higher in a McKinsey & Company survey included in the Journal’s report. Fifty-eight percent of consumers said they would trust Google for financial products.

The Journal also reports that Google won’t sell financial information to advertisers, which is great, but that doesn’t mean it won’t use that information to target specific advertising at customers based on their income or spending habits — which is really the only reason Google would get into financial products in the first place.

It’s also the only thing you need to know when considering whether this is a good idea. I’m not sure any amount of “loyalty program” or convenience can make up for the cost of having even more of your personal information monetized.

Jason AtenWriter and business coach

561 subscribers
Google is planning to launch consumer checking accounts next year in partnership with Citigroup and Stanford University, The Wall Street Journal (WSJ) reported on Wednesday (Nov. 13). Code-named Cache, the accounts will be handled by Citigroup and a credit union at Stanford University. The branding will reflect the financial institutions and not Google. “Our approach is going to be to partner deeply with banks and the financial system,” Google VP of Product Management Caesar Sengupta told WSJ. “It may be the slightly longer path, but it’s more sustainable.”

Google to Pay $2.1 Billion for Fitbit, Making It the Latest Giant Ramping Up on Healthtech

Google is the latest giant company angling to secure more of users’ health information–potentially boding well for healthtech startups looking for an acquirer one day.

Reuters reported this week that Google’s owner, Alphabet, has made an offer to acquire wearable device maker Fitbit. Update: On Friday, Fitbit announced that it has agreed to be acquired by Google for approximately $2.1 billion. The deal is expected to close in 2020. The news comes on the heels of reports last month that Fitbit CEO James Park was exploring a potential sale for his company.

Park and CTO Eric Friedman co-founded the San Francisco-based company in 2007, and proceeded to help pioneer the wearable device industry–which reached a value of $1.6 billion last year, according to a June Research and Markets report. But recently, Reuters noted, the company has been struggling to successfully pivot from fitness trackers to smartwatches, now dominated by Apple and Samsung.

Google’s interest in smartwatches has been well-documented. Last month, Business Insider reported that the company started developing smartwatch offerings as early as 2013–but has still never released one because of a series of internal reorganizations, quality issues, and design struggles. In January, Google spent $40 million to acquire a chunk of smartwatch intellectual property–and members of the team responsible for creating it–from fashion designer and manufacturer Fossil Group.

More broadly, tech giants have spent the past few years snapping up health care data-oriented startups. In June of 2018, Amazon bought online pharmacy, and 2016 Inc. Rising Star, PillPack for near $750 million–and it acquired digital health startup Health Navigator for an undisclosed price just last Wednesday. Apple purchased personal health data company Gliimpse in 2016, sleep sensor maker Beddit in 2017, and asthma monitoring system Tueo Health in 2018, all also for undisclosed prices.

Altogether, the health care industry has seen at least 250 mergers, acquisitions, shareholder spinoffs, and other similar deals per quarter for more than two years, according to PwC’s most recent U.S. Health Services Deals Insights report. The report noted that in the third quarter of 2019 alone, the industry’s deals tallied $19.6 billion, up nearly 18 percent from the same quarter a year ago.

Cameron Albert-Deitch Reporter, Inc.

Source: Google to Pay $2.1 Billion for Fitbit, Making It the Latest Giant Ramping Up on Healthtech

291K subscribers
CNBC’s “Squawk on the Street” crew discuss the news that Fitbit will be acquired by Google.

Google Warns LastPass Users Were Exposed To ‘Last Password’ Credential Leak

Google Project Zero is a team of highly talented security analysts with a brief to uncover zero-day vulnerabilities. If a vulnerability is found, Project Zero reports to the vendor concerned and starts a 90-day countdown for a fix to be issued before full public disclosure is made. LastPass is also in the security business, being one of the most popular password management solutions with more than 16 million users, including 58,000 businesses. Project Zero has just disclosed that a security vulnerability left some of those 16 million users exposed to the risk of credential compromise as, in an ironic twist, LastPass could leak the last password used to any website visited.

How could the LastPass ‘last password’ vulnerability be exploited?

In a tweet posted September 16, Google Project Zero analyst Tavis Ormandy stated that “LastPass could leak the last used credentials due to a cache not being updated,” adding “this was because you can bypass the tab credential cache being populated by including the login form in an unexpected way!”

Ormandy reported the vulnerability on August 29, as Project Zero issue 1930, which showed how the credentials previously filled by LastPass could be exposed to any website under certain circumstances.

Today In: Innovation

Ferenc Kun, the security engineering manager for LastPass at LogMeIn, which owns LastPass, said in an online statement that this “limited set of circumstances on specific browser extensions” could potentially enable the attack scenario described.

“To exploit this bug, a series of actions would need to be taken by a LastPass user including filling a password with the LastPass icon, then visiting a compromised or malicious site and finally being tricked into clicking on the page several times,” Kun said, “any potential exposure due to the bug was limited to specific browsers (Chrome and Opera.)”

The answer, thankfully, is nothing. LastPass has already patched the vulnerability, and the fix was comprehensively verified with Project Zero. Indeed, the fix was rolled out on September 13, and Kun confirmed that “we have now resolved this bug; no user action is required and your LastPass browser extension will update automatically.”

As a precaution, the LastPass update was deployed to all web browsers and not just Chrome and Opera.

How severe was this vulnerability and should you stop using LastPass?

Let’s deal with the last part of that question first; there’s absolutely no reason to stop using LastPass or your preferred password manager for that matter. “Although password managers like any other software have flaws the benefits of using one far outweigh the risks,” says ethical hacker John Opdenakker. “It’s far more likely that your accounts will get compromised by attacks that exploit poor passwords,” Opdenakker says, “such as through credential reuse, than by attacks against password managers themselves.”

OK, so how serious was this particular vulnerability? It certainly sounds serious enough, right? Tavis Ormandy at Project Zero allocated the vulnerability a “high” severity rating. Opdenakker isn’t so sure it merits that. “I think it’s most important that LastPass fixed this bug, which is certainly not a critical one, within a reasonable amount of time,” Opdenakker says, “it’s debatable whether it’s high or medium because, as Ormandy says, it doesn’t work for all URLs.”

LastPass security recommendations

Ferenc Kun said that LastPass continues to recommend the following best practices for added online security:

  • Do not click on links from people you don’t know, or that seem out of character from your trusted contacts and companies.
  • Always enable Multi-Factor Authentication (MFA) for LastPass and other services like your bank, email, Twitter, Facebook, etc.
  • Never reuse your LastPass master password and never disclose it to anyone, including us.
  • Use different, unique passwords for every online account.
  • Keep your computer malware-free by running antivirus with the latest detection patterns and keeping your software up-to-date.

More at Forbes

This iPhone Hack Let Google Access iOS Device Files

Google To Fix Malicious Invites Issue For 1 Billion Calendar Users

New Security Warning Issued For Google’s 2 Billion Chrome Users

Follow me on Twitter or LinkedIn. Check out my website.

I’m a three-decade veteran technology journalist and have been a contributing editor at PC Pro magazine since the first issue in 1994. A three-time winner of the BT Security Journalist of the Year award (2006, 2008, 2010) I was also fortunate enough to be named BT Technology Journalist of the Year in 1996 for a forward-looking feature in PC Pro called ‘Threats to the Internet.’ In 2011 I was honored with the Enigma Award for a lifetime contribution to IT security journalism. Contact me in confidence at davey@happygeek.com if you have a story to reveal or research to share

Source: Google Warns LastPass Users Were Exposed To ‘Last Password’ Credential Leak

This is a short intro to how to use LastPass. Links: https://www.lastpass.com https://youtu.be/M4Z0xwzpQrk (My Diceware Video) ======================================== Follow me on Twitter: @redfalconsec Like me on Facebook: search “RedFalcon Security” Fonts used: Digitalt by gluk (http://www.dafont.com/digitalt.font) Royalty free ClipArt provided by LibrOffice Impress and clker (www.clker.com). This video made entirely in Linux using open source tools.

Google Just Gave 2 Billion Chrome Users A Reason To Switch To Firefox

Berlin, Germany - February 26: In this photo illustration the app of Google Chrome is displayed on a smartphone on February 26, 2018 in Berlin, Germany. (Photo Illustration by Thomas Trutschel/Photothek via Getty Images)

Berlin, Germany – February 26: In this photo illustration the app of Google Chrome is displayed on a smartphone on February 26, 2018 in Berlin, Germany. (Photo Illustration by Thomas Trutschel/Photothek via Getty Images)

Google is planning to restrict modern ad blocking Chrome extensions to enterprise users only, according to 9to5Google. This is despite a backlash to an announcement by Google in January proposing changes that will stop current ad blockers from working efficiently.

And the software giant is not backing down: It says the only people who can use ad blockers following the change will be Google’s enterprise users.

The proposal–dubbed Manifest V3–will see a major transformation to Chrome extensions that includes a revamp of the permissions system. It will mean modern ad blockers such as uBlock Origin—which uses Chrome’s webRequest API to block ads before they’re downloaded–won’t work. This is because Manifest V3 sees Google halt the webRequest API’s ability to block a particular request before it’s loaded.

People aren’t impressed. Many have complained about the move, which effectively takes control away from the user and creates an incentive to use other services instead.

9to5Google highlighted a single sentence buried in the text of Google’s response to the complaints, which clarified the changes: “Chrome is deprecating the blocking capabilities of the webRequest API in Manifest V3, not the entire webRequest API (though blocking will still be available to enterprise deployments).”

In other words, paid enterprise-only users will still have the ability to block unwanted content. It probably means enterprise customers can develop in-house Chrome extensions, not for ad blocking use, 9to5Google says. For everyone else, the changes announced in January will remain the same.

It’s annoying, to say the least, but the reason for these changes is obvious: Ads are at the heart of Google’s business model.

“We are starting to see Google’s conflict of interest arising,” Sean Wright, an independent security consultant told me. “Google relies on the revenue of advertising, so one can see why they would make such a move.”

What to do

There are many users who won’t use Chrome without an ad blocker, so it will see some switch to other providers such as Firefox. However, Firefox has had its own issues over recent weeks.

It’s important to note that the changes won’t stop all ad blockers from working, but exactly who is affected isn’t totally clear. Google sent me a statement by email, which reads: “Chrome supports the use and development of ad blockers. We’re actively working with the developer community to get feedback and iterate on the design of a privacy-preserving content filtering system that limits the amount of sensitive browser data shared with third parties.”

For now, Wright thinks people should use Brave instead: “Brave is built upon Chromium so all existing Chrome plugins and even themes work on it. This is perhaps why it’s seen an increase in user numbers.”

Another option is using something like Pi-Hole, says Wright. “This works on the DNS level and has blacklists of adverts as well as malicious URLs.”

I’m a freelance cyber security journalist with over a decade’s experience reporting on the issues impacting users, businesses and the public sector.

Source: Google Just Gave 2 Billion Chrome Users A Reason To Switch To Firefox

How Google’s Work With Motorbike Riders In India Demonstrates Its Plan For Emerging Markets

India is the world’s largest market for motorbikes, with two-wheelers making up 70% of all vehicles registered by its 1.3 billion residents. It’s these motorbike drivers, more so than car owners, that Google needs to please as it competes for mindshare in this emerging market. So when user research showed that motorbikers in India didn’t find Maps useful, a team in Google’s Seattle office was tasked with figuring out how to change it.

A dive into the data revealed that motorbike drivers would only open the app for about 30 seconds and then close it. The team of product experts hypothesized that drivers needed more guidance on their route, so they spun up a prototype that would provide more in-ride prompts. But when they tested it with users in Jaipur, the largest city in the Indian state of Rajasthan, the prototype flopped.

The trials and errors to make Maps work better in India were a wake-up call, says Lauren Celenza, lead designer on Google’s two-wheeler project. As Google aims to reach more users in emerging markets like India, South East Asia, Africa and Latin America, the company needed to better integrate user research with product design.

“Opening up of the process beyond the walls of our offices is a playbook that we’re looking to for future projects,” Celenza says.

After actually spending time in India talking to people, the product team realized that the exact opposite of their initial assumption was true: Motorbike drivers didn’t want to look at or listen to their phones at all as they navigated the crowded and often chaotic roads. Instead, they wanted clearer guidance before starting out.

That initial design process highlights the too common tech industry hubris wherein companies launch tools for people far away without proper preparation or understanding of regional wants, needs or cultural differences. At its most anodyne, this approach leads to unpopular products. But it can also fuel real-world crises, like fake news and hate-speech going viral in Myanmar because Facebook didn’t have enough Burmese-speaking moderators.

The Google Maps team on the project ended up building a “two-wheeler mode” with customized routes for motorbikes that simplifies the maps and highlights landmarks to make it easier for drivers to understand and memorize the way before starting out. Since that product launched about a year and a half ago, its usage has grown from one million daily users to 5 million, and Google has launched the feature in more than a dozen new markets.

Two-wheeler mode falls under the domain of what Google calls its “Next Billion Users” initiative to reach users in emerging markets, either by launching new products or adapting old ones. For example, Google launched data-light and offline versions of Search, YouTube and Maps, and created an India-specific payments service called Tez.

At Google’s I/O developers conference last week, the company announced several other features geared at emerging markets. For example, it will start allowing people to pay for Android apps using cash and demoed an automatic text-to-speech service that will initially launch in Google’s Go app for entry-level devices.

“We need to do a lot more work to make sure our technologies and our services actually work really well for these users, including designing the right products for their unique needs,” Caesar Sengupta, vice president of Google’s Next Billion Users group, tells Forbes. “The amount of work we have left to do is still huge.”

In the past year, Google has faced a handful of controversies about how it cooperates with foreign governments. In August, the Intercept reported that the company was working on a version of its search engine in China that would comply with the country’s strict censorship laws. U.S. politicians, human rights activists and Google employees criticized the project, describing it as a tool for oppression and a slap in the face of Internet freedom. Google eventually told Congress in December that it has “no plans” to launch a search engine in China.

This spring, Google (and Apple) received widespread criticism for offering a Saudi Arabian smartphone app that allows husbands to track their wives. The country’s “male guardianship system,” which requires women to obtain male approval for certain actions, makes tracking legal, and Google said it would not remove the app.

Sengupta, who reportedly had a leadership role in the Dragonfly project, said that the company is “really engaged” in debates about the services it provides.

“The world is evolving fast,” he said. “We need to be constantly looking at what we’re doing and what are the right ways to be doing something.”

Contact this reporter at jdonfro [at] forbes.com. Have a more sensitive tip? Reach Jillian via encrypted messaging app Signal at 978.660.6302 using a non-work phone or contact Forbes anonymously via SecureDrop (instructions here: https://www.forbes.com/tips/#6ebc8a4f226a).

I’m a San Francisco-based staff writer for Forbes reporting on Google and the rest of the Alphabet universe, as well as artificial intelligence more broadly.

Source: How Google’s Work With Motorbike Riders In India Demonstrates Its Plan For Emerging Markets

%d bloggers like this: