Amazon is selling its no-checkout tech to other stores, and we have questions

After two years of running its own cashierless “ Amazon Go ” stores, Amazon now wants other retailers to start using the tech. The “ Just Walk Out ” service, which launched this week, lets retailers equip their stores with cameras, weight sensors, and other technology to detect what people grab from the shelves. Shoppers scan a credit card when they enter the store, and the system automatically bills them for each item when they exit, with an optional kiosk allowing them to enter an email address for receipts. It’s unclear what size of stores Amazon is targeting, but the company says it’s ideal for places where customers are in a rush and have long lines. The company told Reuters that it has “several” unnamed retail customers on board already. If Just Walk Out takes off, it could upend the entire brick-and-mortar retail system even without shifting ever-greater amounts of shopping online . Yet in announcing the new program, Amazon has chosen not to discuss many fundamental issues, such as how it’ll affect jobs and what it will do with all the data it collects. The company declined to answer most questions for this story, instead referring to a brief question-and-answer section on its website . Will Just Walk Out stores accept cash? Although Amazon says it can retrofit existing stores with its tech, the company isn’t saying whether those stores could (or should) continue to accept cash Read More …

We keep falling for phishing emails, and Google just revealed why

You should feel cranky about all the phishing emails you get. Because getting your brain in a grumpy gear will elevate the odds of your not getting fooled by the next phony invitation to log into your account. At a briefing Wednesday evening at the Black Hat security conference in Las Vegas, Google security researcher  Elie Bursztein and University of Florida security professor Daniela Oliveira shared that and other insights about the business of coaxing people into giving up their usernames and passwords. The first thing to know about phishing: It’s not as random and sloppy as it might seem. Said Bursztein: “Phishers have constantly refined.” The roughly 100 million phishing emails Google blocks every day fall into three main categories: highly targeted but low-volume spear phishing aimed at distinct individuals, “boutique phishing” that targets only a few dozen people, and automated bulk phishing directed at thousands or hundreds of thousands of people. Those categories differ in duration. Google typically sees boutique campaigns wrap up in seven minutes, while bulk phishing operations average 13 hours. Google also sees most phishing campaigns target its commercial mail service . Bursztein said Google-hosted corporate email accounts were 4.8 times more likely to receive phishing emails than plain old Gmail accounts. Email services were the most commonly impersonated login page in those attempts, at 42%, followed by cloud services (25%), financial institutions (13%), online retail (5%), and delivery services (4%). Bursztein noted that Google still can’t definitely identify many phishing emails—as improbable as that might seem, considering all the data it collects. That explains why Gmail shows an orange box above messages that look somewhat suspicious but aren’t necessarily attacks. This is your brain on phishing attacks The presentation also covered the human factors that make phishing easier. As Oliveira explained, “When we are in a good mood, our deception-detection accuracy tends to decline.” She cited research showing that increased levels of such feeling-good hormones as testosterone and estrogen, oxytocin, serotonin, and dopamine increase people’s risk-taking appetite. But a jump in cortisol levels associated with stress makes us warier. Presumably, the soundtrack for your mail screening should not be Marvin Gaye’s “Let’s Get It On” but the J. Read More …