According to President Trump speaking at a campaign event in Tucson, Arizona, on Monday, “nobody gets hacked.” You don’t need someone who covers security day in and day out to call bullshit on this one.
“Nobody gets hacked. To get hacked you need somebody with 197 IQ and he needs about 15 percent of your password,” Trump said, referencing the recent suspension of C-SPAN political editor Steve Scully, who admitted falsely claiming his Twitter account was hacked this week after sending a tweet to former White House communications director Anthony Scaramucci.
There’s a lot to unpack in those two-dozen words. But aside from the fact that not all hackers are male (and it’s sexist to assume that), and glossing over the two entirely contrasting sentences, Trump also neglected to mention that his hotel chain was hacked twice — once over a year-long period between 2014 and 2015 and again between 2016 and 2017.
We know this because the Trump business was legally required to file notice with state regulators after each breach, which they did.
In both incidents, customers of Trump’s hotels had their credit card data stolen. The second breach was blamed on a third-party booking system, called Sabre, which also exposed guest names, emails, phone numbers and more.
The disclosures didn’t say how many people were affected. Suffice it to say, it wasn’t “nobody.”
A spokesperson for the Trump campaign did not return a request for comment.
It’s easy to ignore what could be considered a throwaway line: To say that “nobody gets hacked” might seem harmless on the face of it, but to claim so is dangerous. It’s as bad as saying something is “unhackable” or “hack-proof.” Ask anyone who works in cybersecurity and they’ll tell you that no person or company can ever make such assurances.
Absolute security doesn’t exist. But for those who don’t know any different, it’s an excuse not to think about their own security. Yes, you should use a password manager. Absolutely turn on two-factor authentication whenever you can. Do the basics, because hackers don’t need an IQ score of 197 to break into your accounts. All they need is for you to lower your guard.
If “nobody gets hacked” as Trump claims, it makes you wonder whatever happened to the 400-pound hacker the president mentioned during his first White House run.
A startup that is aiming to digitize millions of neighborhood stores in Bangladesh just raised the country’s largest Series A financing round.
Dhaka-headquartered ShopUp said on Tuesday it has raised $22.5 million in a round co-led by Sequoia Capital India and Flourish Ventures. For both the venture firms, this is the first time they are backing a Bangladeshi startup. Veon Ventures, Speedinvest, and Lonsdale Capital also participated in the four-year-old ShopUp’s Series A financing round. ShopUp has raised about $28 million to date.
Like its neighboring nation, India, more than 95% of all retail in Bangladesh goes through neighborhood stores in the country. There are about 4.5 million such mom-and-pop stores in the country and the vast majority of them have no digital presence.
ShopUp is attempting to change that. It has built what it calls a full-stack business-to-business commerce platform. It provides three core services to neighborhood stores: a wholesale marketplace to secure inventory, logistics (including last mile delivery to customers), and working capital, explained Afeef Zaman, co-founder and chief executive of ShopUp, in an interview with TechCrunch.
These small shops are facing a number of challenges. They are not getting inventory on time or enough inventory and they are paying more than what they should, said Zaman. And for these businesses, more than 73% (PDF) of all their sales rely on credit instead of cash or digital payments, creating a massive liquidity crunch. So most of these businesses are in dire need of working capital.
Zaman declined to reveal how many mom-and-pop shops today use ShopUp, but claimed that the platform assumes a clear lead in its category in the country. That lead has widened amid the global pandemic as more physical shops explore digital offerings to stay afloat, he said.
The number of neighborhood shops transacting weekly on the ShopUp platform grew by 8.5 times between April and August this year, he said. The pandemic also helped ShopUp engage with e-commerce players to deliver items for them.
“Sequoia India has been a strong supporter of the company since it was part of the first Surge cohort in early 2019 and it’s been exciting to see the company become a trailblazer facilitating digital transformation in Bangladesh,” said Klaus Wang, VP, Sequoia Capital, in a statement.
The startup has no intention to become an e-commerce platform like Amazon that directly engages with consumers, Zaman said. E-commerce is still in its nascent stage in Bangladesh. Amazon has yet to enter the country and increasingly Facebook is filling that role.
ShopUp sees immense opportunity in serving neighborhood stores, he said. The startup plans to deploy the fresh capital to deepen its partnerships with manufacturers and expand its tech infrastructure.
It opened an office in Bengaluru earlier this year to hire local tech talent in the nation. Indian e-commerce platform Voonik merged with ShopUp this year and both of its co-founders have joined the Bangladeshi startup. Zaman said the startup will hire more engineering talent in India.
SAIF Partners has raised $400 million for a new fund and rebranded the 18-year-old influential venture capital firm as it looks to back more early-stage startups in the world’s second largest internet market.
The new fund is SAIF Partners’ seventh for early-stage startups in India. Its previous two funds were each $350 million in size, and the firm today manages more than $2 billion in assets.
SAIF Partners started investing in Indian startups 18 years ago. The firm began as a joint venture with SoftBank and its first high-profile investment was Sify. But the two firms’ joint venture ended more than a decade ago, so the firm is now getting around to rebranding itself, Ravi Adusumalli, the managing partner of SAIF Partners, told TechCrunch in an interview.
The firm — which has five unicorns in its portfolio, including Paytm’s parent firm One97 Communications, food delivery startup Swiggy and online learning platform Unacademy — is rebranding itself as Elevation Capital.
“Elevation reflects our investment ethos and re-emphasises our commitment to the founders who help redefine our future. For our existing partners, it is a commitment of continued collaboration on our path-breaking journeys together. For our new partners, it is a promise to do all we can to achieve great heights together, from day one,” said Adusumalli.
SAIF Partners has backed more than 100 startups to date. The venture firm makes long-term bets on founders and backs young firms beginning their early years when they are raising their seed, pre-Series A and Series A financing rounds.
The venture firm invests in startups operating in a wide-range of sectors and plans to continue this strategy and add more areas of interest, said Deepak Gaur, a managing director at Elevation Capital, in an interview with TechCrunch.
“Enterprise SaaS is one area where we are spending a lot of resources,” he said. “We believe the time has come for this sector and we will see many global companies emerge from India.”
More than 15 startups in Elevation Capital’s portfolio are projected to become a unicorn in the next few years, according to Tracxn, a firm that tracks startups and investments in India. These include healthcare booking platform PharmEasy, app-based platform to book home services Urban Company, insurance tech startup Acko, digital loan platform Capital Float, real estate property marketplace NoBroker and online marketplace for gold Rupeek.
A number of SAIF Partners-backed startups, including IndiaMART, MakeMyTrip and Justdial, have become publicly listed companies, too.
Mukul Arora, a managing partner at SAIF Partners, said that the state of the Indian startup ecosystem has changed for the better in the past decade. “A few years ago, we were seeing many startups replicate a foreign company’s play in India. Today, we are seeing our ideas being replicated outside of the country. Someone is building a Meesho for Brazil,” he said.
The founders have also grown more sophisticated, said Mayank Khanduja. Elevation Capital has over three dozen employees, with about two-dozen focused on the investment size.
Elevation Capital’s new fund comes at a time when many established venture capital firms have also closed their new funds for India in recent months. In July, Sequoia Capital announced two funds — totaling $1.35 billion in size — for India. A month later, Lightspeed raised $275 million for its third Indian fund. Accel late last year closed its sixth fund in India at $550 million.
All of the LPs participating in Elevation Capital’s new fund, as was the case with previous funds, are U.S.-based, and the vast majority of them are nonprofits, said Adusumalli. Without disclosing any figures, he said the firm’s previous funds have performed very well.
On Friday, former Tiger Global Management investor Lee Fixel registered plans for the second fund of his new investment firm, Addition, just four months after closing the first. According to a report on Friday by the Financial Times, the outfit spent last week finalizing the fundraising for the $1.4 billion fund, which Addition reportedly doesn’t plan to begin investing until next year.
But a source close to the firm now says the capital has not been raised. That’s perhaps good news for investors who were shut out of Addition’s $1.3 billion debut fund and who might be hoping to write a check this time around.
The mere fact that Fixel is back in the market already has tongues wagging about the dealmaker, one whose reluctance to talk on the record with media outlets seems only to add to his mystique. Forbes published a lengthy piece about Fixel this summer, in which Fixel seems to have provided just one public statement, confirming the close of Addition’s first fund and adding little else. “We are excited to partner with visionary entrepreneurs, and with our 15-year fund duration, we have the patience to support our portfolio companies on their journey to build impactful and enduring businesses,” it read.
According to Forbes, that first fund — which Fixel is actively putting to work right now — intends to invest one-third of its capital in early-stage startups and two-thirds in growth-stage opportunities.
Whether that includes some of the special purpose acquisition vehicles, or SPACs, that are coming together right and left, isn’t yet known, though one imagines these might appeal to Fixel, who has long seemed to be at the forefront of new trends impacting growth-stage companies in particular. (A growing number of SPACs is right now looking to transform into public companies some of the many hundreds of richly valued private companies in the world.)
Clearer is that Addition is wasting little time in writing some big checks. Among its announced deals is Inshorts, a seven-year-old, New Delhi, India-based popular news aggregation app that last week unveiled $35 million new funding led by Fixel.
The deal represents Addition’s first India-based bet, even while Fixel knows both the country and the startup well. He previously invested in Inshorts on behalf of Tiger; he’s also credited for snatching up a big stake in Flipkart on behalf of Tiger, a move that reportedly produced $3.5 billion in profits when Flipkart sold to Walmart.
Addition also led a $200 million round last month in Snyk, a five-year-old, London-based startup that helps companies securely use open-source code. The round valued the company at $2.6 billion — more than twice the valuation it was assigned when it raised its previous round 10 months ago.
And in August, Addition led a $110 million Series D round for Lyra Health, a five-year-old, Burlingame, California-based provider of mental health care benefits for employers that was founded by former Facebook CFO David Ebersman.
A smaller check went to Temporal, a year-old, Seattle-based startup that is building an open-source, stateful microservices orchestration platform. Last week, the company announced $18.75 million in Series A funding led by Sequoia Capital, but Addition also joined the round, having been an earlier investor in the company.
According to PitchBook data, Addition has made at least 17 investments altogether.
Fixel — whose bets while at Tiger include Peloton and Spotify — isn’t running Addition single-handedly, though according to Forbes, he is the single “key man” around which the firm revolves, as well as the biggest investor in Addition’s first fund.
He has also brought aboard at least three investment principals from Wall Street and a head of data science who worked formerly for Uber (per Forbes). Ward Breeze, a longtime attorney who worked formerly in the emerging companies practice of Gunderson Dettmer, is also working with Fixel at Addition.
(Correction: An earlier version of this story reported that Fixel’s newest fund was already raised, per the FT.)
TikTok has been cracking down on QAnon-related content, in line with similar moves by other major social media companies, including Facebook and YouTube, which focus on reducing the spread the baseless conspiracy theory across their respective platforms. According to a report by NPR this weekend, TikTok had quietly banned several hashtags associated with the QAnon conspiracy, and says it will also delete the accounts of users who promote QAnon content.
Tiktok tells us, however, these policies are not new. The company says they actually went on the books earlier this year.
TikTok had initially focused on reducing discoverability as an immediate step by blocking search results while it investigated, with help from partners, how such content manifested on its platform. This was covered in July by several news publications, TikTok said. In August, TikTok also set a policy to remove content and ban accounts, we’re told.
Despite the policies, a report this month by Media Matters documented that TikTok was still hosting at least 14 QAnon-affiliated hashtags with over 488 million collective views. These came about because the platform had yet to address how QAnon followers were circumventing its community restrictions using variations and misspellings.
After Media Matters’ report, TikTok removed 11 of the 14 hashtags it had referenced, the report noted in an update.
Today, a number of QAnon-related hashtags — like #QAnon, #TheStormIsComing, #Trump2Q2Q” and others — return no results in TikTok’s search engine. They don’t show under the “Top” search results section, nor do they show under “Videos” or “Hashtags.”
Instead of just showing users a blank page when these terms are searched, TikTok displays a message that explains how some phrases can be associated with behavior or content that violates TikTok’s Community Guidelines, and offers a link to that resource.
Media Matters praised the changes in a statement to NPR as something TikTok was doing that was “good and significant” even if “long overdue.”
While TikTok’s ban did tackle many of the top search results and tags associated with the conspiracy, we found it was overlooking others, like pizzagate and WWG1WGA, for instance. In tests this afternoon, these terms and many others still returned much content.
TikTok claims what we saw was likely “a bug.”
We had reached out to TikTok today to ask why searches for terms like “pizzagate” and “WWG1WGA” — popular QAnon terms — were still returning search results, even though their hashtags were banned.
For example, if you just searched for “pizzagate,” TikTok offered a long list of videos to scroll through, though you couldn’t go directly to its hashtag. This was not the case for the other banned hashtags (like #QAnon) at the time of our tests.
The videos returned discussed the Pizzagate conspiracy — a baseless conspiracy theory which ultimately led to real-world violence when a gunman shot up a DC pizza business, thinking he was there to rescue trapped children.
While some videos were just discussing or debunking the idea, many were earnestly promoting the pizzagate conspiracy, even posting that it was was “real” or claimed to be offering “proof.”
Above: Video recorded Oct. 19, 2020, 3:47 PM ET/12:47 PM PT
Other QAnon-associated hashtags were also not subject to a full ban, including WWG1WGA, WGA, ThesePeopleAreSick, cannibalclub, hollyweird and many others often used to circulate QAnon conspiracies.
When we searched these terms, we found more long lists of QAnon-related videos to scroll through.
We documented this with photos and videos before reaching out to TikTok to ask why these had been made exceptions to the ban. We specifically asked about the two top terms — pizzagate and WWG1WGA.
TikTok provided us with information about the timeline of its policy changes and the following statement:
Content and accounts that promote QAnon violate our disinformation policy and we remove them from our platform. We’ve also taken significant steps to make this content harder to find across search and hashtags by redirecting associated terms to our Community Guidelines. We continually update our safeguards with misspellings and new phrases as we work to keep TikTok a safe and authentic place for our community.
TikTok said also that the search term blocking must have been a bug, because it’s now working properly.
We found that, upon receiving TikTok’s confirmation, the terms we asked about were blocked, but others were not. This includes some of those mentioned above, as well as bizarre terms only a real conspiracy fan would know, like adrenochromereptilians.
We asked Media Matters whether it could still praise TikTok’s actions to ban QAnon content, given what, at the time, had appeared to be a loophole in the QAnon ban.
“TikTok has of course taken steps but not fully resolved the problem, but as we’ve noted, the true test of any of these policies — like we’ve said of other platform’s measures — is in how and if they enforce them,” the organization said.
Even if the banned content was only showing today because of a “bug,” we found that many of the users who posted the content have not actually been banned from TikTok, it seems.
Though a search for their username won’t return results now that the ban is no longer “buggy,” you can still go directly to these users’ profile pages via their profile URL on the web.
We tried this on many profiles of those who had published QAnon content or used banned terms in their videos’ hashtags and descriptions. (Below are a few of examples.)
What this means is that although TikTok reduced these users’ discoverability in the app, the accounts can still be located if you know their username. And once you arrive on the account’s page, you can still follow them.
These examples of “bugs” or just oversights indicate how difficult it is to enforce content bans across social media platforms.
Without substantial investments in human moderation combined with automation, as well as tools that ensure banned users can’t return, it’s hard to keep up with the spread of disinformation at social media’s scale.