We’re not getting a national vaccine passport. Here’s why it never stood a chance

Political arguments about vaccine passports have been raging for months : whether we need them, if they could be built equitably , and if they are ultimately an infringement on Americans’ rights to keep their health information private. But while other countries experiment with rolling out digital vaccination credentials, the U.S. national effort was doomed before it ever began. Security experts had hoped that the government would develop a national system for credentialing vaccine recipients. A national vaccine passport would create a single standard that could be used everywhere and would be potentially difficult to fake. But on Tuesday, the White House announced the federal government would not be “supporting” a vaccine credential system. Part of what that means is that there will be no centralized database where all vaccination records live—a crucial feature of vaccine verification systems in other countries like Israel and Estonia. “Unless there was a major change in how health data is viewed from a public and government perspective, it wouldn’t even be possible to create the database,” says JP Pollak, cofounder and chief architect of the Commons Project, which has developed a globally available mobile app for storing COVID-19 testing results. “States have the mandate for maintaining vaccination registries and states are required to report things like how many people have been vaccinated for COVID-19, but they actually are not permitted to transmit the personal information of people back to the CDC [Centers for Disease Control and Prevention].” . @PressSec Jen Psaki on possibility of the federal government supporting vaccine passports: “The government is not now, nor will we be supporting a system that requires Americans to carry a credential.” Full video here: https://t.co/TLFF718hVo pic.twitter.com/jJP0Ph95jH — CSPAN (@cspan) April 6, 2021 Since states are charged with maintaining vaccine registries, some, like New York, are creating their own credentialing systems Read More …

Tracy Chou’s Block Party is fighting online trolls—and the startup ecosystem itself

In January 2021, prominent software engineer Tracy Chou opened up registrations for her company’s first product. The service—like the company, called Block Party—is designed to help people who experience harassment online, starting on Twitter but with the ambition to expand to other platforms. By giving users more control over what they see on Twitter, Chou is hoping to solve one of the biggest and most intractable problems with social media. The problem is also deeply personal. “I have some dedicated harassers who are proud to have been harassing me for six or seven years,” says Chou, who grew up in Silicon Valley as the child of Taiwanese immigrants. “Platforms are really bad at detecting this and don’t really care.” Chou’s experiences with online abuse began when she was in high school, she recalls, but slowly escalated when she became an early employee at Quora and then Pinterest. While at Pinterest, she published a blog post encouraging tech companies to reveal how many female engineers they employed, sparking a movement toward publishing diversity metrics. In 2016, she cofounded Project Include, solidifying her position as an outspoken advocate for equity and inclusion in the tech industry. But as her profile has risen—she now has more than 100,000 Twitter followers —the more she has been forced to deal with trolls, stalkers, and serial harassers sending her abusive, horrifying messages everywhere she goes online. “My whole life is oriented around how I can be safe, psychologically, mentally, and physically,” she says. Now, as Block Party’s founder and CEO, Chou is confronting a new challenge: a well-capitalized competitor offering a free alternative to Block Party. Just a few weeks after Chou opened Block Party to the public, another startup called Sentropy announced a similar product. Like Block Party, Sentropy Protect is designed to help Twitter users manage online harassment by filtering out abusive messages. While Chou ultimately plans to sell subscriptions to Block Party, Sentropy, whose core business is enterprise software, says it will always offer Protect to individual users for free. My whole life is oriented around how I can be safe, psychologically, mentally, and physically.” Tracy Chou, Block Party The financial disparity between the two companies is stark. Though both launched their consumer products in early 2021 and were founded around the same time in 2018, Sentropy has raised a total of $13 million in funding. Block Party has raised less than $1.5 million, from Precursor Ventures and a handful of angel investors including Project Include CEO Ellen Pao, former Facebook executive Alex Stamos, and former TechCrunch editor Alexia Bonatsos. When we spoke in early March, Chou was her company’s only full-time employee and she’d built most of the product on her own. Sentropy, meanwhile, has a team of 26. For some in Silicon Valley, news that Sentropy would be competing with Block Party touched a raw nerve Read More …

Discord and Slack are becoming potent tools for malware attacks

Attackers are finding the file-sharing capabilities in popular group-chat apps such as Discord and Slack a convenient way to distribute malware, warns a new report from Cisco Talos, Cisco’s threat intelligence unit. The risk isn’t just that hackers can gain access to a particular channel and trick people in it into downloading malware. Once a file containing malicious code is uploaded, attackers can also grab a freely accessible link to that file where it’s hosted on the chat system’s servers. Then, they can send that link to people via phishing emails, misleading texts, or any other method they have of reaching potential victims. In some cases, malware can connect to these sorts of links to download additional malicious code once it’s already running on victims’ machines. Some malware also uses group-chat apps to share data with and receive commands from the people operating it, according to the report. In particular, Discord has an API (application programming interface) that enables programs to automatically post messages to channels on the service via a digital address called a webhook. That’s useful for many legitimate purposes, but it’s also valued by malware creators who want their software to essentially phone home from infected machines. And during the coronavirus pandemic, as more people are using platforms such as Discord and Slack to stay in touch with friends, coworkers, and others, so too are criminals moving to these tools for their own convenience, according to the Cisco Talos researchers. Malware and commands sent through these channels can blend in with other, legitimate traffic. “We’ve seen a marked increase in the abuse of collaboration apps like Discord and Slack to be used to both distribute malware and as a command-and-control system,” says Nick Biasini, a Cisco Talos threat researcher who worked on the report. Functionality such as that offered by Discord “allows them to manage command and control without having to manage their own server.” One challenge for people trying to thwart these attacks is that malware and commands sent through these channels can blend in with other, legitimate traffic to files and chat rooms hosted on these platforms. Seeing a URL that mentions Discord, Slack, or another trusted channel might also help lull users into a false sense of security when it appears in a phishing email. And it’s also not possible for security experts to take down the domain hosting the malicious content, since it’s commingled with legitimate Slack or Discord files from around the world rather than on a domain of its own. In some cases, hackers use malware to harvest digital access tokens that can be used to connect to Discord, according to the report. Read More …

The simple reason tech CEOs have so much power

Coinbase’s plan to go public in April highlights a troubling trend among tech companies: Its founding team will maintain voting control, making it mostly immune to the wishes of outside investors. The best-known U.S. cryptocurrency exchange is doing this by creating two classes of shares . One class will be available to the public. The other is reserved for the founders, insiders and early investors, and will wield 20 times the voting power of regular shares. That will ensure that after all is said and done, the insiders will control 53.5% of the votes . Coinbase will join dozens of other publicly traded tech companies —many with household names such as Google, Facebook, Doordash, Airbnb, and Slack—that have issued two types of shares in an effort to retain control for founders and insiders. The reason this is becoming increasingly popular has a lot to do with Ayn Rand , one of Silicon Valley’s favorite authors , and the “myth of the founder” her writings have helped inspire Read More …

The Air Force is using this mental health service to help with stress

The pandemic has been stressful for everyone, and that includes members of the military. In the past two years, suicide rates among active military service members have gone up 15%. The military has long offered resilience training and access to therapy, but in 2020, the Air Force decided to take a different course of action. It began offering an innovative mental health platform called NeuroFlow to make care more accessible and to track how members were doing, so it could intervene if it seemed someone was a risk to themselves. “It is known throughout the mental health community that the Department of Defense is experiencing a spike in suicides at an alarming rate,” says Durel Williams, a Master Sergeant in the U.S. Air Mobility Command, where he’s responsible for 2,800 security forces members. Of those, 600 have signed up for NeuroFlow, which tracks fitness, sleep, well-being, loneliness, depression, alcohol use, and anxiety. It also offers tools for emotional regulation, like guided meditation, journaling, and video and written resources. All of this data becomes part of a user’s electronic health record. Artificial intelligence will then alert clinical staff about people who seem at risk. So far, 12 people have been flagged as at-risk, and in one instance a person was stopped from harming themselves. [Photo: courtesy of NeuroFlow] Military members can sign up for the app anonymously. Their data is also shared only with healthcare providers, not management. If they are flagged for any reason, a care coordinator gives them a call to check in on them and see if they need more help. Before this pilot with NeuroFlow, the military offered mental health care through traditional talk therapy and resilience training. Williams has been working as a resiliency trainer for the last 10 years, giving people tools to help them rebound from a difficult situation. However, accessing care is complicated. In order to see a therapist, service members are removed from duty, which is extremely stigmatizing. However, Williams says, it is a necessary step. “Their duty is to secure and protect, and they are on an arming roster where every day they’re expected to be able to pick up their weapon and go to work. Read More …