All posts by Paul Stradling

Tech Insight : Cameras In Airbnb Properties – What Are The Rules?

Following the Metro recently highlighting the issue of undisclosed cameras being used by a small number of Airbnb hosts, we take a look at what the rules say, reports in the news of this happening, and what you can do to protect yourself.

Do Airbnb Hosts Have The Right To Film Guests? 

You may be surprised to know that the answer to this question is yes, hosts do have the right to install surveillance devices in certain areas of their properties (which may result in guests being filmed) but this is heavily regulated and restricted for privacy reasons.

When/Where/Why/How Is It OK For Hosts To Film Guests? 

The primary legitimate reason for hosts to install surveillance devices is for security purposes. They are not allowed to use them for any invasive or unethical purposes. Airbnb’s community standards, for example, emphasise respect for the privacy of guests and any violation of these standards can lead to the removal of the host from the platform.

Clear Disclosure 

Airbnb’s company rules say that monitoring devices (e.g. cameras), may be used, but only if they are in common spaces (such as living rooms, hallways, and kitchens) and then only if Airbnb hosts disclose them in their listings. In short, if a host has any kind of surveillance device, they must clearly mention it in their house rules or property listing so that guests are made aware of these devices before they book the property.

What About Local Laws? 

It is also the case that although disclosed cameras in common spaces on a property may be OK by the company’s rules, Airbnb hosts must also adhere to local laws and regulations regarding surveillance. This can vary widely from place to place and, in some regions, recording audio without consent is illegal, whereas video might be permissible if disclosed.

Hidden Cameras 

Even though Airbnb rules are relatively clear, there appears to be anecdotal and news evidence that some Airbnb guests have discovered undisclosed surveillance devices in areas of Airbnb properties where they should not be installed. Examples that have made the news include:

– Back in 2019, it was reported that a couple staying for one night at an Airbnb property in Garden Grove, California discovered a camera hidden in a smoke detector directly above the bed.

– In July 2023, a Texas couple were widely reported to have filed a lawsuit against an Airbnb owner, claiming he had put up ‘hidden cameras’ in the Maryland property they had rented for 2 nights in August 2022. According to the Court documents of Kayelee Gates and Christian Capraro, the couple became suspicious after Capraro discovered multiple hidden cameras disguised as smoke detectors in the bedroom and bathroom.

– Last month, a man (calling himself Ian Timbrell) alleged in a post on X that he had found a camera tucked between two sofa cushions at his Aberystwyth Airbnb.

Wouldn’t It Be Better To Disallow Any Cameras Inside An Airbnb Rental Property? 

Banning all cameras at Airbnb rental properties might initially seem like a straightforward solution to privacy concerns, yet there are important factors to consider around this. Some hosts may legitimately need to use common areas such as entrances, for security purposes (perhaps the property is in an area where crime has been a problem) and they need to deter theft and vandalism and provide evidence if a crime occurs. On the other hand, a complete ban on cameras would address the privacy concerns of guests, ensuring they feel comfortable and secure during their stay.

Airbnb’s current policy attempts to balance security and privacy by allowing cameras in certain areas while requiring full disclosure and banning them in private spaces like bedrooms and bathrooms. However, enforcing a complete ban on cameras would be very challenging, as hidden cameras are, by nature, difficult to detect and even if there was a ban, some owners may simply not comply. The Airbnb model is built on trust between hosts and guests, and clear communication and transparency about security measures, including camera usage, are crucial for maintaining this trust. While a total ban on cameras might seem like a simple solution to privacy concerns, it overlooks the legitimate security needs of hosts. A balanced approach with clear guidelines and strict enforcement might be more effective in protecting both guest privacy and host security.

How To Check 

If you’re worried about possibly being filmed/recorded by hidden and undisclosed surveillance devices in a rented Airbnb property, here are some ways you can search the property and potentially reveal such devices:

– Inspect any gadgets. Check smoke detectors or alarm clocks as they are known as places to hide cameras. Examine any other tech that seems out of place. You may also want to check the shower head.

– Search for Lenses. For example, making sure the room is dark, use a torch (such as your phone’s torch) to spot reflective camera lenses in objects like decor or appliances.

– Use phone apps like Glint Finder for Android or Hidden Camera Detector for iOS to find hidden cameras.

– Check storage areas, e.g. examine drawers, vents, and any openings in walls/ceilings.

– Check mirrors. Many people worry about the two-way mirrors with cameras behind them. Ways to check include lifting any mirrors to see the wall behind, turning off the room light and then shining a torch into the mirror to see if an area behind is visible.

– Check for infrared lights (which can be used in movement-sensitive cameras). Again, this may be spotted by by using your phone’s camera in the dark, and then looking out for any small, purple, or pink lights that may be flashing or steady.

– Scan the property’s Wi-Fi network and smart home devices for unknown devices.

– Unplug the Airbnb property’s router. Stopping the Wi-Fi at source should disable surveillance devices and may reveal whether the owner is monitoring the property, e.g. it may prompt the host to ask about the router being unplugged.

– If you’re particularly concerned, buy and bring an RF signal detector with you. Widely available online, this is a device that can find any devices emitting Bluetooth or Wi-Fi signals, e.g. wireless surveillance cameras, tracking devices and power supplies.

What Does This Mean For Your Business? 

The issue of undisclosed cameras in Airbnb properties raises important considerations for Airbnb as a company, its hosts, and travellers. For Airbnb, the challenge lies in upholding and enforcing privacy standards to maintain user trust. This could involve enhancing their policies, perhaps even investing in technology or an inspection process for better detection of undisclosed devices, and/or providing more reassuring information about the issue, thereby safeguarding guest security, ensuring host accountability, and helping to protect their brand reputation.

It should be said that most Airbnb hosts abide by the company’s rules but are caught in a delicate balancing act between providing security and respecting the privacy of their guests. Any misuse of surveillance devices can, of course, have serious legal consequences and potentially harm a host’s reputation and standing on the platform. However, even just a few stories in the news about the actions on one or two hosts can have a much wider negative effect on consumer trust in Airbnb and can be damaging for all hosts. It could even simply deter people from using the platform altogether.

For some travellers, this situation may make them feel they must proactively take the responsibility for their own privacy (which may not reflect so well on Airbnb). They may feel as though they need to be informed about their rights, familiarise themselves with detection methods and remain vigilant during their stays.

This whole scenario emphasises the need for a continuous update of policies and practices by Airbnb to keep pace with technological advancements and the varying legal frameworks in different regions. It also highlights the importance of clear communication and transparency between the company, its hosts, and guests to maintain a trustworthy and secure environment.

Tech News : Google Files Fiasco

An issue with Google’s cloud that locked some Google Drive for desktop users out of some of their files from the last six months has led to some angry comments being left on Google’s community support site.

Reported Over A Week Ago 

The issue was first reported by a user (known as ‘Yeonjoong) back on 22 November. The user describes the issue (on the Google Drive Help page) as:

“The Drive literally went back to condition in May 2023. Data from May until today disappeared, and the folder structure went back to status in May. Google Drive activity doesn’t show any changes (only show activity that was in May). No files were deleted manually, so no files in Trash. I never sync or shared my files and drive to anyone, I used the drive locally.“ 

Still Investigating

At the time of writing this article, Google says it is still investigating the issue. Also, the user who first reported it claims that none of the fixes suggested by Google so far have worked.

What Are Other Users Saying? 

Posts from other affected users have highlighted issues such as:

– Losing access to important files from recent months.

– Questioning the dependability of the Drive Service.

– Asking for a full explanation of what had happened and to be informed about when their data will appear back.

– Fears that important data may have been altered or permanently lost, e.g. by clicking on the disconnect button (which users have now been informed not to do, but some claim were told to do originally).

– Reports of stress and worry, with some users threatening legal action.

What Does Google Advise? 

At present, Google’s advice to affected Drive for desktop users in relation to what Google is calling the “Drive for desktop (v84.0.0.0 – 84.0.4.0) Sync Issue” is:

– Not to click “Disconnect account” within Drive for desktop.

– Not to delete or move the app data folder: Windows: %USERPROFILE%\AppData\Local\Google\DriveFS or macOS: ~/Library/Application Support/Google/DriveFS.

– (Optional) If users have room on your hard drive, to make a copy of the app data folder.

Google Cloud Vulnerabilities 

This latest story comes hot on the heels of Bitdefender researchers reporting recently that they’d discovered vulnerabilities in Google Workspace and Google Cloud Platform which, after first compromising the local machine, could allow threat actors to extend their activities to a “chain reaction” network-wide breach, potentially leading to ransomware attacks or data exfiltration.

What Does This Mean For Your Business? 

The main concern for businesses directly impacted by this issue revolves around data integrity and reliability. Losing access to recent files can disrupt ongoing projects, delay deadlines, potentially lead to financial losses, and make users very angry and frustrated (as the comments on Google’s help page show). This incident highlights the importance of having a robust backup strategy that doesn’t rely solely on cloud services. Those businesses who have been directly affected or those who may have been spooked by this story may now want to reassess their data management policies, considering additional local or multi-cloud backups for critical data.

For the wider base of Google Cloud users, this incident could be seen as a kind of cautionary tale that underscores the need for vigilance in cloud data management, and the importance of understanding the potential risks associated with cloud storage solutions. Really (time and resources permitting) users should try to stay informed about best practices for data safety and be proactive in implementing them. This could include regular audits of data access, backup strategies, and staying updated on service updates and potential vulnerabilities. That said, it seems fair for most businesses who are paying Google for aspects of its cloud service to at least expect to be able to access their files when they need them and if there is there is a problem, expect Google to sort it out quite quickly (not a week or so later). Also, many users may have been even more frustrated by a possible lack of communication on Google’s side about the issue, e.g. at least an estimate of when they could expect it to be fixed and regular updates on the situation.

For Google, this lockout issue could obviously be damaging to its reputation as a reliable cloud service provider. In the competitive cloud market, reliability and trust are paramount. Google will need to not only address the current issue swiftly and transparently but also take proactive steps to prevent similar occurrences in the future. This could involve investing more in their infrastructure, enhancing their communication protocols during crises, and possibly reviewing their update and deployment strategies to ensure minimal disruption to users. The way Google handles this situation (which many affected users haven’t been too impressed with so far) could have lasting effects on its market position and user trust.

Although this issue has posed some challenges to affected businesses, it could also be seen on reflection as providing valuable lessons for all stakeholders in the cloud services arena. Lessons include understanding more fully what their customers value the most and making more of a commitment to matters of reliability, transparency, and communication.

Tech News : AI Job Risks – Finance & Insurance

Analysis by the Department for Education’s Unit for Future Skills to try and quantify the impact of AI on the UK jobs market found the finance and insurance sector was more exposed than any other.

The Analysis 

“The impact of AI on UK jobs and training” report published online by the government highlights the results of a study that used US methodology to look at the abilities needed to perform different job roles, and the extent to which these can be aided by a selection of 10 common AI applications.

These applications are:

  1. Abstract Strategy Games: The ability to play abstract games involving sometimes complex strategy and reasoning ability, such as chess, go, or checkers, at a high level.
  2. Real-time Video Games: The ability to play a variety of real-time video games of increasing complexity at a high level.
  3. Image Recognition: The determination of what objects are present in a still image.
  4. Visual Question Answering: The recognition of events, relationships, and context from a still image.
  5. Image Generation: The creation of complex images.
  6. Reading Comprehension: The ability to answer simple reasoning questions based on an understanding of text.
  7. Language Modelling: The ability to model, predict, or mimic human language.
  8. Translation: The translation of words or text from one language into another.
  9. Speech Recognition: The recognition of spoken language into text.
  10. Instrumental Track Recognition: The recognition of instrumental musical tracks.

These AI applications were selected based on their relevance and the progress in technology from 2010 onwards, as recorded by the Electronic Frontier Foundation (EFF). They represent fundamental applications of AI that are likely to have implications for the workforce and cover the most likely and most common uses of AI.

The study also focuses on which occupations, sectors and areas within the UK labour market are expected to be most impacted by AI and large language models, and how this could impact workers in different UK geographic areas.

The Findings 

The key findings of the study show that:

– Professional occupations are more exposed to AI, especially those associated with more clerical work and across finance, law, and business management roles.

– The industries least exposed to AI and to LLMs across industries are accommodation and food services, motor trades, agriculture, forestry, and fishing, transport and storage and construction.

– The finance and insurance sector is more exposed to AI than any other sector.

– The occupations most exposed to all AI applications are management consultants and business analysts.

– The occupations most exposed to large language modelling are telephone salespersons, followed by solicitors and psychologists.

– Workers in London and the South East have the highest exposure to AI (five times as exposed as the North-East of England), reflecting the greater concentration of professional occupations in those areas.

These findings led to some press reports that AI’s incursion into our working lives would most affect ‘city highflyers.’

Qualifications and Training

The study also exposes the qualifications and training routes that most commonly lead to these highly impacted jobs, concluding that:

– Employees with more advanced qualifications are typically in jobs more exposed to AI, e.g. those with a level 6 qualification (equivalent to a degree).

– Employees with qualifications in accounting and finance through Further Education or apprenticeships, and economics and mathematics through Higher Education are typically in jobs more exposed to AI.

Other Studies 

Other studies highlighting levels of exposure to AI (AI taking jobs) include:

– A Pew Research Centre Study (2022) which found that 19 per cent of US workers were in jobs highly exposed to AI, where key activities might be replaced or assisted by AI.

– A Goldman Sachs Report (2023) suggesting that AI could replace the equivalent of 300 million full-time jobs globally. It indicates that about a quarter of work tasks in the US and Europe could be replaced by AI, impacting two-thirds of jobs in these regions to some degree.

IMF  

A recent (October 2023) paper also highlights the dual nature of AI in advanced economies – AI’s potential as either a complement or a substitute for labour. The paper also highlights the important point that women and highly educated workers face greater occupational exposure to AI.

It’s worth noting that the Goldman Sachs Report (shown above) also highlighted this dual effect of AI, showing that AI also has the potential to create new jobs and boost productivity, potentially increasing the total annual value of goods and services produced globally by 7 per cent.

What Does This Mean For Your Business? 

As highlighted in the report for this study (and as supported by the findings of other studies), 10-30 per cent of jobs are automatable with fast-evolving AI putting many of those jobs at risk. This government study confirms largely what many people may have expected – that those in more clerical work and across finance, law, and business management roles (where generative AI’s outputs are particularly effective) are most at risk from AI diminishing their value as workers. There are, of course, many other areas (some highlighted by this report) where generative AI is clearly able to replace or reproduce/copy human efforts to an acceptable degree, e.g. from customer service roles to creative work (artists). Some people may find that it’s disconcerting that jobs/professions which have taken years of study and have a specialist element and high social value (e.g. solicitors and psychologists) are shown in the report to be suddenly and significantly at risk from what are, basically, algorithms.

The report’s findings also makes what seems to be quite a logical conclusion that since there’s a greater concentration of professional occupations in London and the South East, it’s more likely to be negatively affected by AI.

The report of the study also makes the valid point about the dual nature of AI’s effects, i.e., that in addition to threatening many jobs, AI also has the potential to increase productivity and create new high value jobs in the UK economy. However, the main focus of this and other studies may appear to confirm the fears of many, that fast-advancing AI is likely to have a profound and widespread effect on the UK economy and society, and not necessarily in a good way for many peoples’ jobs, skills, and value.

As highlighted in the report, the UK education system and employers will now need to adapt to ensure that individuals in the workforce have the skills they need to make the most of the potential benefits advances in AI will bring. As individual workers, many may now want to look at the ways they can maximise their value and be in a position where they can use and orchestrate what are essentially tools more effectively than others, and in a way that adds value to themselves and their own positions, and/or in a way that creates new opportunities.

An Apple Byte : Police Warnings Over iOS 17’s NameDrop

It’s been reported that iOS 17’s new NameDrop feature has prompted the Police to issue warnings to parents on social media (in the US) about its potential to be abused, possibly posing a risk to their children.

NameDrop, introduced with iOS 17.1 in November allows those with iPhones and Apple Watches running watchOS 10.1 to share their contact information, (plus photos and more with AirDrop) simply by holding their phones close together (within a few millimetres).

Police in several US states have issued warnings that this feature could, therefore, enable predators to use NameDrop to steal personal contact information from unsuspecting teens just by placing their phone next to the teen’s phone.

The Police also highlighted the fact that for protection, the feature can be turned off by going to settings, selecting AirDrop, selecting “Bringing Devices Together,” and then moving the toggle to off. There is also a ‘Contacts Ony’ option which means that only someone on the iPhone’s contact list can connect through AirDrop and NameDrop.

Security Stop Press : Potential ‘DeleFriend’ Security Flaw Found in Google Workspace

Researchers from cyber security firm Hunters have reported finding a Google Workspace design flaw that could allow attackers to steal emails from Gmail, data from Google Drive, and carry out other unauthorised actions within Google Workspace APIs on all of the identities in a target domain.

The design flaw (a fact reportedly disputed by Google), dubbed ‘DeleFriend,’ can be exploited by a process that involves attackers being able to leverage an existing domain-wide delegation permission to create their own fresh private key to perform API calls to Google Workspace on behalf of other identities in the domain.

It’s been reported that the Workspace domain-wide delegation feature’s potential “security risk” has been known to Google since June. Palo Alto Networks Unit 42 suggest that a way to mitigate the risk is to position service accounts with domain delegation permissions within a higher-level folder in the Google Cloud Platform (GCP) hierarchy.

Sustainability-in-Tech : Dynamic Window Breakthrough

Researchers at North Carolina State University in the US have developed a new dynamic window material that can tune out certain wavelengths of light and block heat to suit the conditions.

Three Modes Now Possible 

The Dynamic window glass can be used to switch windows between three modes: transparent, or “normal” windows, windows that block infrared light (helping to keep a building cool), and tinted windows that control glare while maintaining the view. This three-mode option is a step forward from existing dynamic windows based on electrochromism (using an electric stimulus to change opacity) which can only switch between clear or dark modes.

Water Is The Key

The researchers report that it’s the binding of water within the crystalline structure of tungsten oxide (forming tungsten oxide hydrate) that allows the window material to exhibit a previously unknown behaviour whereby it can be tuned to three modes.

How Does It Work? 

To summarise how and why it works:

Transparent tungsten oxides have long been used in dynamic windows by using an electrical signal and injecting lithium ions and electrons into the material to make it dark and block light.

The new research, however, showed that adding water to the crystalline structure of tungsten oxide hydrate (a substance related to tungsten oxide that can accommodate more lithium ions) makes its structure less dense. This makes it more resistant to deformation when lithium ions and electrons are injected into it, thereby enabling it to have two modes. The first is a “heat blocking” mode (the cool mode), allowing visible wavelengths of light to pass through, but blocking infrared light. The second, (which happens after more lithium ions and electrons are injected), is a dark mode, which blocks out both visible and infrared wavelengths of light.

Delia Milliron, co-corresponding author of the paper about the research said: “The discovery of dual-band (infrared and visible) light control in a single material that’s already well-known to the smart windows community may accelerate development of commercial products with enhanced features”. She also highlighted the potential wider implications of the discovery, saying: “The unforeseen role of structural water in producing distinctive electrochemical properties may inspire the research community beyond smart window developers, leading to innovation in energy storage and conversion materials.”

Why Have Dynamic / Smart Windows Anyway? 

Dynamic windows, or smart windows, offer several benefits. For example:

– Energy efficiency. They reduce energy consumption by controlling heat and light entry, leading to lower heating and cooling costs.

– Comfort and productivity. By managing glare and natural light, they create a more comfortable environment, enhancing productivity in workplaces and schools.

– UV protection. These windows block harmful UV rays, protecting interiors and occupants from sun damage.

– Privacy and security. Their adjustable opacity offers privacy and added security without the need for blinds or curtains.

– Aesthetic and design flexibility. They provide architects with more design options, allowing for large glass surfaces without excessive heat gain or loss.

– Environmental impact. By reducing reliance on artificial lighting and climate control, they help lower a building’s carbon footprint.

– Health benefits. Optimal natural light exposure improves mood and sleep patterns.

Overall, dynamic windows offer a combination of energy savings, comfort, aesthetic appeal, and environmental sustainability.

What Does This Mean For Your Organisation? 

This breakthrough in dynamic window technology may have significant implications for organisations across a spectrum of industries because it offers a dual benefit of enhanced building design and energy efficiency. Organisations may now leverage windows that automatically adjust to changing light and temperature, thereby optimising internal environments while reducing reliance on artificial climate control. This could not only improve energy efficiency, but also potentially lower operational costs related to heating, cooling, and lighting. What’s also special about this discovery is that it uses an already known technology, but dramatically improves it by using a cheap and abundant addition – water.

Environmentally, this technology aligns with sustainability objectives, i.e. contributing substantially to lowering energy consumption by reducing the need for artificial lighting and air conditioning. This innovation could, therefore, be a step forward for organisations aiming to reduce their carbon footprint and champion environmental stewardship.

The potential impact on occupants’ well-being is also worth noting. The ability of these windows to control glare while maintaining clear visibility could enhance comfort in workplaces and educational settings. Natural light is known to improve mood and productivity, suggesting that this innovation could lead to better work and learning environments.

From an architectural standpoint, this technology offers new creative possibilities. Designers can now incorporate large glass structures without compromising energy efficiency or internal comfort. This not only expands design options but may also enhance the aesthetic value of buildings.

The broader implications of this technology, as pointed out by researcher Delia Milliron, extend beyond smart windows to potentially influence areas like energy storage and conversion. This suggests that organisations within these sectors should be attentive to subsequent developments that might emerge.

Also, while the initial implementation of this technology might require investment, the long-term benefits are substantial. Lowered energy costs, increased property value, and alignment with sustainable trends present a strong economic and strategic case for the technology. For organisations looking to position themselves as progressive and environmentally conscious, this technology could significantly enhance their market presence and public perception.

This new dynamic window material may be more than just an advancement in smart windows, and could provide a gateway to greater energy efficiency, environmental responsibility, improved occupant comfort, architectural innovation, and a broader and beneficial technological impact.

Tech Tip – Use Chrome As A Simple Note-Taking App

If you’re using Google Chrome to browse the internet and want a quick way to jot down notes or ideas without needing a separate app, this trick will turn a Chrome tab into a simple note-taking app. Here’s how it works:

– Open a new tab in Chrome.

– Copy and paste or type “data:text/html, <html contenteditable>” into the address bar and press Enter.

– A blank page will appear where you can type notes directly.

– You can now bookmark the page to save it for later so you can refer back to your notes within Chrome any time.

Featured Article : 3000% Increase in Deepfake Frauds

A new report from ID Verification Company Onfido shows that the availability of cheap generative AI tools has led to Deepfake fraud attempts increasing by 3,000 per cent (specifically, a factor of 31) in 2023.

Free And Cheap AI Tools 

Although deepfakes have now been around for several years, as the report points out, deepfake fraud has become significantly easier and more accessible due to the widespread availability of free and cheap generative AI tools. In simple terms, these tools have democratised the ability to create hyper-realistic fake images and videos, which were once only possible for those with advanced technical skills and access to expensive software.

Prior to the public availability of AI tools, for example, creating a convincing fake video or image required a deep understanding of computer graphics and access to high-end, often costly, software (a barrier to entry for would-be deep-fakers).

Document and Biometric Fraud – The New Frontier 

The Onfido data reveals a worrying trend in that while physical counterfeits are still prevalent, there’s a notable shift towards digital manipulation of documents and biometrics, facilitated by the availability and sophistication of AI tools. Fraudsters are not only altering documents digitally but also exploiting biometric verification systems through deepfakes and other AI-assisted methods. The Onfido report highlights a dramatic rise in the rate of biometric fraud, which doubled from 2022 to 2023.

Deepfakes – A Growing Threat 

As reinforced by the findings of the report, deepfakes pose an emerging and significant threat, particularly in biometric verification. The accessibility of generative AI and face-swap apps has made the creation of deepfakes easier and highly scalable, which is evidenced by a 31X increase in deepfake attempts in 2023 compared to the previous year!

Minimum Effort (And Cost) For Maximum Return

As the Onfido report points out, simple ‘face swapping’ apps (i.e. apps which leverage advanced AI algorithms to seamlessly superimpose one person’s face onto another in photos or videos) offer ease of use and effectiveness in creating convincing fake identities. They are part of an influx of readily available online AI assisted tools that are providing fraudsters with a new avenue into biometric fraud. For example, the Onfido data shows that Biometric fraud attempts are clearly higher this year than in previous years with fraudsters favouring tools like the face-swapping apps to target selfie biometric checks and create fake identities.

The kind of fakes these cheap, easy apps create have been dubbed “cheapfakes” and this conforms with something that’s long been known about online fraudsters and cyber criminals – they seek methods that require minimum effort, minimum expense and minimum personal risk, yet deliver maximum effect.

Sector-Specific Impact of Deepfakes 

The Identity Fraud Report shows that (perhaps obviously) the gambling and financial sectors in particular are facing the brunt of these sophisticated fraud attempts. The lure of cash rewards and high-value transactions in these sectors makes them attractive targets for deepfake-driven frauds. In the gambling industry, for example, fraudsters may be particularly attracted to the sign-up and referral bonuses. In the financial industry, where frauds tend to be based around money laundering and loan theft, Onfido reports that digital attacks are easy to scale, especially when incorporating AI tools.

Implications For UK Businesses In The Age of (AI) Deepfake-Driven Fraud 

The surge in deepfake-driven fraud highlighted by the somewhat startling statistics in Onfido’s 2024 Identity Fraud Report, suggest that UK businesses navigating this new landscape may require a multifaceted approach. This could be achieved by balancing the implementation of cutting-edge technologies with heightened awareness and strategic planning. In more detail, this could involve:

– UK businesses prioritising the reinforcement of their identity verification processes. The traditional methods may no longer suffice against the sophistication of deepfakes. Therefore, Adopting AI-powered solutions that are specifically designed to detect and counter deepfake attempts could be the way forward. This could work as long as such systems can keep up with the advancements in fraudulent techniques (more advanced techniques may emerge as more AI sophisticated AI tools emerge).

– The training of staff, i.e. educating them about the nature of deepfakes and how they can be used to perpetrate fraud. This could empower employees to better recognise potential threats and respond appropriately, particularly in sectors like customer service and security, where human judgment plays a key role.

– Maintaining customer trust. UK businesses must navigate the fine line between implementing robust security measures and ensuring a frictionless customer experience. Transparent communication about the security measures in place and how they protect customer data can help in maintaining and even enhancing customer trust.

– As the use of deepfakes in fraud rises, regulatory bodies may introduce new compliance requirements and UK businesses will need to ensure that they stay abreast of these changes both to protect customers and remain compliant with legal standards. This in turn could require more rigorous data protection protocols or mandatory reporting of deepfake-related breaches.

– Collaboration with industry peers and participation in broader discussions about combating deepfake fraud may also be a way to gain valuable insights. Sharing knowledge and strategies, for example, could help in developing industry-wide best practices. Also, partnerships with technology providers specialising in AI and fraud detection could offer access to the latest tools and expertise.

– Since deepfake fraud may be an ongoing threat, long-term strategic planning may be essential. This perspective could be integrated into long-term business strategies, thereby (hopefully) making sure that resources are available and allocated not just for immediate solutions but also for future-proofing against evolving digital threats.

What Else Can Businesses Do To Combat Threats Like AI-Generated Deepfakes? 

Other ways that businesses can contribute to the necessary comprehensive approach to tackling the AI-generated deepfake threat may also include:

– Implementing biometric verification technologies that require live interactions (so-called ‘liveness solutions’), such as head movements, which are difficult for deepfakes to replicate.

– The use of SDKs (platform-specific building tools for developers) over APIs. For example, SDKs provide better protection against fraudulent submissions as they incorporate live capture and device integrity checks.

The Dual Nature Of Generative AI 

Although, as you’d expect an ‘Identity Fraud Report’ to do, the Onfido report focuses solely on the threats posed by AI, it’s important to remember that AI tools can be used by all businesses to add value, save time, improve productivity, get more creative, and to defend against the AI threats. AI-driven verification tools, for example, are becoming more adept at detecting and preventing fraud, underscoring the technology’s dual nature as both a tool for fraudsters and a shield for businesses.

What Does This Mean For Your Business? 

Tempering the reading of the startling stats in the report with the knowledge that Onfido is selling its own deepfake (liveness) detection solution and SDKs, it still paints a rather worrying picture for businesses. That said, The Onfido 2024 Identity Fraud Report’s findings, highlighting a 3000 per cent increase in deepfake fraud attempts due to readily available generative AI tools, signal a pivotal shift in the landscape of online fraud. This shift could pose new challenges for UK businesses but also open avenues for innovative solutions.

For businesses, the immediate response may involve upgrading identity verification processes with AI-powered solutions tailored to detect and counter deepfakes. However, it’s not just about deploying advanced technology. It’s also about ensuring these systems evolve with the fraudsters’ tactics. Equally crucial is the role of employee training in recognising and responding to these sophisticated fraud attempts.

As regulatory landscapes adjust to these emerging threats, staying informed and compliant is also likely to become essential. The goal is not only to counter current threats but to build resilience and innovation for future challenges.

Tech Insight : A Dozen Ways Copilot Can Help Your Business

With Microsoft’s Copilot AI assistant now embedded within the Microsoft 365 apps and services to help users save time and increase productivity, we look at a dozen things you can do with Copilot to help your business.

Microsoft 365 Copilot 

Copilot fuses ChatGPT version 4 and Microsoft Graph. More specifically, Copilot is designed to integrate the capabilities of ChatGPT version 4 (a sophisticated language model developed by OpenAI), with the extensive data and connectivity provided by Microsoft Graph.

Microsoft Graph is an API platform that enables developers to access and integrate data and insights from various Microsoft services and applications, such as Office 365, Windows 10, and Enterprise Mobility + Security, facilitating the creation of rich, interconnected applications within the Microsoft ecosystem.

This integration allows Copilot to leverage the conversational AI capabilities of ChatGPT in conjunction with the rich data ecosystem of Microsoft 365, enhancing productivity and offering more advanced features within Microsoft’s suite of applications.

Microsoft says Copilot can increase an employee’s productivity by as much as 50 per cent and that it can unlock the other 90 per cent of things that its apps can do that most users never try.

A Dozen Ways Copilot Can Help 

With this in mind, here are a dozen ways that you can use Copilot to help with your business:

1. Automating Customer Service Responses 

Copilot can manage routine customer service queries by providing instant, accurate responses to FAQs. This helps by reducing wait times and improving customer satisfaction. It can also act as a way to identify and escalate the more complex issues to human representatives, ensuring a balance between efficiency and having a personal touch.

2. Generating Reports and Summaries 

Microsoft 365 Copilot can also analyse large sets of data to generate detailed reports and executive summaries. This can be really helpful in identifying key metrics and trends, which are essential for strategic planning and decision-making, without the need for manual data crunching. This is an important way that Copilot can save time and effort and add more transparency to a business.

3. Drafting and Editing All Manner Of Business Documents 

Copilot assists in creating professional business documents, emails, and presentations. It offers suggestions on content, structure, and style, ensuring that the documents are not only well-written but also tailored to their intended audience. Again, this can save time and improve productivity but also improve the quality of business communications.

4. Data Analysis and Insights 

By analysing complex datasets, Copilot can uncover valuable insights, helping businesses understand customer behaviour, market trends, and operational efficiency. This leads to more informed decision-making and strategy development.

5. Scheduling and Calendar Management 

It streamlines calendar management by scheduling meetings, appointments, and events based on your availability. It can also send automated reminders and updates, ensuring efficient time management and reducing scheduling conflicts.

6. Training and Educational Resources 

Copilot can create custom training materials and educational content that are specifically tailored to a company’s processes and systems. This can help in onboarding new employees more efficiently and keeping the workforce updated on new tools and practices. This can, of course, also save money on training and potentially improve the efficiency of training (because it can be more targeted and customised).

7. Automating Routine Tasks 

For tasks like data entry, inventory management, and basic accounting, Copilot can automate these processes, thereby reducing the risk of human error and allowing employees to focus on more strategic and creative tasks.

8. Language Translation and Localisation 

Microsoft Copilot can also be used to facilitate global business operations by translating documents and communications into various languages, ensuring that businesses can effectively communicate with international clients and partners.

9. Market Research and Analysis 

Copilot can scour the internet and various databases to conduct market research, analyse industry trends, and provide actionable insights, helping businesses stay ahead in their market.

10. Social Media Management 

Copilot can also help with creating, scheduling, and analysing social media posts. Copilot can also track engagement metrics, thereby helping businesses understand their audience better and refine their social media strategies.

11. Project Management Assistance  

Microsoft 365 Copilot can also help with tracking project milestones, resource allocation, and progress updates. This can ensure that projects stay on track, resources are efficiently used, and stakeholders are kept informed.

12. Legal and Compliance Documentation 

One other really helpful aspect of Copilot is that it can assist in drafting legal documents and ensure that business operations comply with relevant laws and regulations. This is crucial for mitigating legal risks and maintaining a company’s reputation.

What Does This Mean For Your Business? 

The integration of Microsoft’s Copilot AI into the Microsoft 365 suite is a significant advancement for 365 and for business technology generally. With Copilot embedded in popular 365 apps, businesses now have a powerful ‘always on’ tool at their disposal to help with productivity, efficiency, creativity, adding value, and more. As such, this integration goes beyond mere convenience, and it taps into the unrealised potential of Microsoft 365, unlocking functionalities that many users have yet to explore, i.e. it can help businesses to leverage (and get more out of) what they’re already paying for from Microsoft.

By being able to quickly and easily automate tasks, e.g. from customer service to complex data analysis, Copilot not only saves time but also enhances creativity and leaves employees free to focus on more strategic and innovative tasks, thereby elevating the quality of work and driving business growth. Also, Copilot’s intuitive, natural language capabilities, akin to those of ChatGPT version 4, make it a user-friendly assistant that can simplify complex tasks and make technology more accessible to everyone in the organisation.

Copilot, therefore, serves as a tool for upskilling employees. It exposes them to a broader range of Microsoft 365 capabilities, fostering a deeper understanding and more efficient use of the software. This aspect of Copilot is particularly valuable as it achieves upskilling organically, without the need for additional training resources. It could be said that Copilot is not just enhancing productivity, but it’s also expanding the technological proficiency of the entire workforce.

For businesses, in addition to streamlining operations, Copilot can also help deliver a competitive edge e.g., the insights gleaned from Copilot’s data analysis and market research capabilities can inform strategic decisions, offering a clearer view of market trends and customer behaviours. Its ability to handle language translations and ensure compliance with legal standards positions businesses for global reach and operational safety may also be of real use for many businesses.

Microsoft 365 Copilot, therefore, is more than an incremental update to business software, but could prove to a transformative tool that can significantly enhance how businesses operate (if businesses make sure they use it). The rewards for using what is a comprehensive, and relatively easy-to-use solution that unlocks the power of the 365 apps could be to propel your businesses into a new era of efficiency and innovation.

Tech News : ICO Cookie Warning To Top Websites

The UK Information Commissioner has warned some of the UK’s top websites that if they don’t offer users fair choices over cookie use, as required by data protection law, they will face enforcement action.

Guidance Not Being Followed 

The Information Commissioner argues that although it has previously issued clear guidance that organisations must make it as easy for users to “Reject All” advertising cookies as it is to “Accept All,” this guidance is still not being followed in many cases.

The Issue 

The issue is that people are concerned about companies using their personal information to target them with ads without their consent. However, some cookies used by websites track users so that they can serve personalised advertising to the user based on their browsing. Therefore, the ICO says that websites must clearly give users the opportunity to reject (or accept / consent to) these types of cookies in order to be compliant with data protection laws.

Stephen Almond, ICO Executive Director of Regulatory Risk, has given examples on the ICO website, of ways that website users can be negatively affected if the top websites they visit aren’t compliant in this way. Mr Almond says: “Gambling addicts may be targeted with betting offers based on their browsing record, women may be targeted with distressing baby adverts shortly after miscarriage and someone exploring their sexuality may be presented with ads that disclose their sexual orientation.”  

Only 30 Days To Comply

The ICO says that it has therefore written to companies running many of the UK’s most visited websites setting out its concerns and giving them 30 days to ensure their websites comply with the law.

Previous Warning 

This latest announcement follows a warning and a paper outlining guidance issued back in August. At the time, the ICO warned designers and developers to stop using harmful design practices that could: “Undermine people’s control over their personal information and lead to worse consumer and competition outcomes.”  

Legislation Changes Concerning 

The current regulations relating to cookie usage are split between General Data Protection Regulation (GDPR) and the Privacy and Electronic Communications Regulations (PECR). The PECR (known as the “cookie law”) led to the introduction of cookie consent pop-ups on websites.

Concerns Over New Bill 

However, a new data protection and digital information bill is on the way which has concerned privacy groups because:

– It will mean fewer cookie consent pop-ups.

– It will allow some websites to collect information (to improve service and security) without consent.

– It will give ministers the power to add new exceptions to cookie consent requirements.

What Does This Mean For Your Business? 

As the ICO’s Stephen Almond says, “many of the biggest websites have got this right” yet it appears that the Information Commissioner has now run out of patience with companies that haven’t yet decided (for whatever reason) to get to grips with and comply with data privacy regulations.

The ICO’s warning to the UK’s top websites about cookie consent has significant implications for businesses, especially those with high online traffic. This move signals an increased urgency for these websites to comply with data protection laws – 30 days isn’t a long time for big companies to comply, although some would argue they’ve had years already to do so. Emphasising the need for fair-use, transparancy and user-friendly cookie consent mechanisms is, therefore, the drive behind the Information Commissioner’s latest ultimatum with the focus on high-traffic sites. This seems to indicate that businesses with larger user bases now face greater scrutiny, and compliance may now be not only a legal necessity but also crucial for maintaining user trust and brand reputation.

The ICO’s announcement serves as a stark reminder for all businesses about the importance of adhering to data protection regulations. This includes staying informed about impending legislative changes that could affect cookie consent and data collection practices (remember, the new bill will see ministers able to make changes to cookie exceptions). For web designers and developers, this latest announcement underscores the need to prioritise user privacy in their designs, moving away from methods that subtly coerce users into accepting cookies.

With public concern over the use of personal data in advertising, this story is a reminder that businesses must be transparent in their cookie usage and provide clear consent options and that this approach is vital in enhancing the trustworthiness of the site. Overall, the ICO’s warning highlights the necessity for a comprehensive and proactive approach to data privacy and protection, urging businesses to not only comply with current laws but also prepare for future changes in legislation and public expectations.