Addy Mobile is (was?) a small company that had, what it seemed to be, a great service called Quip: Instead of paying the very high rates that carriers charge for sending MMS (and in the US the troublesome process of knowing the MMS’s codes for all the providers), you could use Quilp, that would make the picture available on their server and would send a text message with a unique URL to one of your friends or to Facebook. The app was received, when it was launched, with great praise and a reviewer described it as “Sitting as the hottest item in social networking apps, Addy Mobile features free unlimited messaging that doesn’t count against your text messaging plan. If you’re searching for an easier, cheaper way to send your iPhone camera pics, I definitely recommend Addy Mobile by Quipp.” The reviewer got the name of the product and the name of the company sideways but you get the picture.

This was in September, 2009. In November 2009, a post showed up on digg from a user that had discovered that if you changed, randomly, the last 5 digits of the URL that Quip sent out to you, you would see another picture from another user, that was not meant for you to see. As the user noted on his post there were only 60,466,176 possibilities and he was going to try some of them. You would expect that Addy Mobile would be monitoring social media networks, to know what was being said about their app, and that they would immediately implement some kind of security, right? Wrong. Addy Mobile did nothing and in the meanwhile thousands of users were uploading their pictures, without knowing that they were also sharing them with the whole world: pictures of a pet’s latest trick, sms snapshots, credit card details and the most intimate moments with a significant other (but mostly with oneself) Quilp was THE final destination for millions of users that trusted the application to spare them some money and some technical hassles. Little did they know that Quilp’s website was also the final destination for thousands of internet users that were watching and downloading pictures that were not meant to be made public.

Enter Anonymous

Two days ago, huge threads started to show up on 4Chan with content that was being downloaded from Quip. A group of users had exploited the lack of security on Quilp’s servers and had written a very simple script that was allowing to automatically randomize those last 5 digits. The responsible for the company, that goes by the name of Ish, finally reacted when he saw a post on reddit and took action, by shutting down Quip’s servers but it was already too late: Millions of (private) photos, some of them including private data, are now fully available on the internet.

Lessons to be learned

One would expect that a company that is charging €0.99 for an application that deals with private data would take security seriously. One would also expect that Apple, that as an infamous track record when it comes to approve applications, would have checked this application thoroughly before it was made available on the App store. The fact that millions of photos were sent via Quip, either to cell phones and/or Facebook and, on a first version, actually included the name of the sender, should have been important enough to act with care. The fact that Addy Mobile decided to ignore, or didn’t monitor, the alert posted on digg is something that has, in my opinion, no explanation. Remember that this was not a security flaw since there was no security implemented. The biggest mistake any company can make is to disregard user’s privacy and to think that no one will find out about it. I find it hard to believe that the people behind Addy Mobile didn’t know that their system was lacking any security system and that any 10 year old could exploit it (just by deleting a number or character and inserting another). The consequences of this irresponsibility are yet to be known but Quip’s users should be worried unless what you send was just that lovely rose bouquet you got.
But the lessons to be learned don’t stop here: There is a lesson to be learned by the users as well: Don’t post anything on a third party website that you might regret in the future. Remember e-mail? Use it! Really, it is better than to have your latest adventures with yourself all over the internet.

Will this be the end of Addy Mobile? Like one user wrote, after Quip’s Ish answered to the thread on reddit: “Saturday: No one knows about your company. Sunday: Anon Finds your company and everyone knows about your company. Monday: You have no company.”

Picture Credit: bcymet under a CC License

You see, when I bought this incredible machine, I was told that I was entitled to get a free upgrade to Windows 7: all I had to do was to go to HP’s website which I did. By clicking on the right link I was taken to what I can only describe as the beginning of a sad adventure that took me to another webpage (from a third party website). I was requested to fill in all my details (including my Credit Card details). When I finished I got  a confirmation e-mail telling me that Windows 7 would be shipped to me as soon as it was available. It was with much excitement that I saw Windows 7 being released all over the world, with great fanfare, and I kept reading reviews about how good it was… and I kept waiting. A few weeks later the official release date , I received an e-mail telling me that due to the specific DVD drive that was installed on my equipment I would have to wait some more time. I did. Finally, some 4 weeks later, I got another e-mail informing me that the company was really sorry that I had cancelled my order. This would be all fine but for a small detail: I never cancelled my order.

I tried to contact HP via e-mail, I tried to contact HP via phone, I tried to contact HP via the vendor that sold me the machine. The result was a lot of nothing. Nada. Zilch. Niente. Around December I looked for HP support accounts on Twitter and tried to reach out. After some effort I finally got an answer. I was told to send all the pertaining info via e-mail and the issue would be dealt swiftly and immediately…  after the Holiday’s season. That came and it was gone (with almost everyone around the world with a few extra pounds) and I waited. After two weeks I tried to contact HP again, via Twitter. I was told that a rep was on it and they would get in contact with me the next day. That was 2 months ago. Windows 7 was released in October, 2009, 5 monhts ago, and I’m still waiting.

I’m tired of waiting. I’m fed up with HP’s handling of this, tired of this support that is nothing but, tired of the promises of swift resolution to a problem that was created by someone else but me (and don’t they dare blaming the computers). It would only take some time for someone at HP to sort this out, probably less time than I’ve  already spent calling and e-mailing HP support (by the way get your act straight in Portugal please, since no one answers the phone) and that I’ve spent writing this post. Yes, I did need some time to write it because if I would write what really is on my mind this post would have to be X-Rated. So, I ask you HP: Please wake up!

I think that this post, based on my personal experience with a brand, somehow will mirror the frustration that many users feel when they are not heard when they should. There is no point in having a Social Media team on Twitter and Facebook if you really don’t understand Social Media: Every single time I see a tweet coming from the @hp_pc account telling the world how much fun they are having at such or such event, I feel angry. Every time I get an e-mail from HP offering me a discount for a product I don’t have I feel angry and probably many users do when they see pure old fashioned marketing taking over communication and swift feedback.

If you have any examples (negative or positive) please let me know in the comments. I have a “Brands that Don’t get it” and “Brands that get it” list that surely can use more users.

Picture Credits: tantrum dan under a CC License

Update: After a few hours of this post being posted I was contacted by an HP representative. After 2 weeks I had my Windows 7 CD.

This post is divided in two parts: The first one has to do with Twitter and how the circle of trust works for me. The other part is aimed at describing and calling attention to how some unscrupulous companies or individuals try and take advantage of young musicians.

The Twitter circle of Trust

Today in the morning I saw a tweet by my dear friend Shelly Kramer  that was a RT of a RT:

I was tempted to RT the Tweet immediately but the fact is that I don’t know who @yahaloma is, so I decided to click on the link and read it for myself before I did my RT. What I found on that post is the reason I am writing this one. If that tweet was “@ShellyKramer RT @SEOcopy RT @adamsconsulting text link ” I would not hesitate and I would have RT it immediatelly. All of them are what I call trusted sources (Shelly and Diana I’m honored to call my friends).  I’m not blaming anyone here, mind you. I’m just trying to explain how this twitter circle of trust works for me. I guess what I’m trying to say is that it is important to check the link if you don’t know who the original person is. That way you are helping to keep the level of overall tweet quality on Twitter high and clean. Also beware of people you don’t know asking you to RT something: Always check the link before you do. On the other hand I’m glad Shelly did RT that tweet because she gave me something to rant about! So thank you Shelly and here we go:

A Scam disguised of Opportunity

With every line I read of this post I got more angry. I got angry to the point of shouting out loud “What the FUCK?!?!?!” (Told you I was going to use strong language). I’ve seen lots and lots of these messages spreading across message boards and also via email and let me tell you: Be careful.

I will skip the motivational blah blah that is the first part of that post. It’s innocuous and it can be applied to everything from fridges to frogs. Let’s deconstruct what really matters:

Universal Music Group is taking submissions for their upcoming compilation cd, deadline is February 28th for the selection process.

Notice the lack of a link to the Universal Music Group? To that page at the Universal Music Group website where they announce they are taking submissions? I do! And so should you. And why is there no link? Because there is no competition, or any call for entries I suspect. Universal Music must get hundreds if not thousands of submissions every single day and to scout for new talent they have a department called “A&R” (Artists and Repertoire and not Artists and Repitore as it is written on their website)

The master, finished product, must be submitted no later than June 2010 for all selected artists, which will be for the summer and Holiday releases.

As anyone in the music industry can tell you, music works pretty much in the same way as Fashion does: Any “finished” product submitted by June 2010 would probably be able to make it to the shops by June 2011. But not only that: Universal, like all majors, likes to keep a tight control on what their bands sound like: All the mastering is done by their trusted studio engineers and adds to the bill that artists have to usually pay. The way it works is that a band gets signed by a major, its taken to a studio, records their material with trusted producers and engineers and then it’s sent on a tour if it sells enough records. If not the band is ditched. End of story.

They request no fewer than 3 songs, from each artist, be submitted for the selection process in which one or two songs will be chosen. One song selected is $250 and if two songs are selected $400. If two songs are selected, they will choose which song is to be on which release.

Ok let me get this straight: You have to submit more than 3 songs, you have to master them (this costs real money) and on top of that you will have to pay $250 if one song is chosen and $400 if two songs are chosen. Anyone wants to bet with me that the lucky winners are going to have two songs selected? Am I the only one smelling something strange around here?

Artist WILL RECOUP this expense: they will receive their royalties from sales and music will be submitted to SoundScan and various publishing companies, which will be paid through your publishing company. They will build a tour from artists with highest number of downloads, and a video shoot of artist in concert, developed into a video for airplay, which the artist is to receive royalties from as well.

This part is what I call the funny, hilarious part of the post. Really! Hilarious! I could laugh till the walls around me would turn into rumble. But I’m not laughing. Actually I am pretty pissed off! Why? I will tell you why!

Do you have any idea how many records an artist has to sell or stream on services like Spotify to get $250 of royalties? I will give you a number to make you think: Lady Gaga’s “Poker Face” streamed more than one million times on Spotify and got payed €133 (Around $191) [read the whole story here] Just do the math please. And what publishing company? You mean the same publishing company that is now calling for tracks to be submitted? Universal Music group? Who? Or do the artists have to setup a publishing company to get the royalties? And just one more thing: Nothing is submitted to SoundScan, as far as I know it. SoundScan is a Nielsen service that companies, like Universal, can buy.

I am not going to post here the e-mail that is given for sending submissions but I would alert you that a company that has a gmail account as their contact should not be trusted. If you check the website you will see how active it is and how full their tour dates are. Furthermore, and interestingly, there is no mention of this call for submissions anywhere to be found.

To give an opportunity to comment on these issues I will send a tweet to @yahaloma asking her to read this post. I do hope that she takes the time to read it since I’m still thinking that she is an innocent victim in all of this.

* Pictures  from Mikey da Photographer and Photos8 via Flickr and edited by me under a Creative Commons License 3.0 by-nc-sa

Another example relates to the Flip camera. My good friend, Shelly (@shellykramer) has complained, on a number of occasions that her beloved Flip camera unexpectedly quit working. She’s been a huge brand advocate for the Flip during the course of the past year, especially on Twitter. She’s talked about her love for the Flip cam and what a terrific addition it is for the “tool set” that small business owners should have and should be using in their marketing efforts. The fact that Flip hasn’t been paying attention simply amazes me. Kodak is paying attention. At the recent 140Conference in Los Angeles, they made sure to put one of their new Zi8 cameras squarely in Shelly’s hands. Funny thing, she tweets about the Zi8 camera and publicly laments that it’s not as user friendly as her beloved Flip.

Both of these examples are clear cut cases of brands just not paying attention. These women are both considered fairly influential, are thought-leaders and tremendously well-respected in the Twitterverse. Their collective “reach” is huge. Yet neither of these brands are, apparently, doing much to monitor this space for brand mentions and are, most assuredly, missing opportunities to do just that.

In the meantime, Dell reported yesterday that it made $6.5 million that is directly attributable to Twitter promotions and operations alone. I’ll admit that $6.5 million is, for many companies, a drop in the bucket. But I know many companies who would gladly take that $6.5 million and laugh all the way to the bank – especially in light of the state of the global economy today.

So, on one side you have an example of a company that embraced Twitter and is using the medium to drive sales and, on the other side, you’ve got examples of companies that totally ignore Twitter as a market space. Am I the only one who finds this shortsighted?

Zippo is another brand that gets it when it comes to social media and gets it well: It monitors the Twitterverse for the zippo keyword and it engages by making RTs and by addressing questions or complaints. Like Zippo and Dell, there are many brands who are already using Twitter, in particular to step up up the level of of communication they have with their end users, as a customer service arena and as a place to engage with prospective clients. And, in my always humble opinion, these are the brands who will, ultimately “win” the marketshare wars and see the results thereof directly in their bottom lines.

Can you afford not to have your brand on Twitter?

One of the objections that I hear often whenever Twitter is mentioned as an integral part of an overall integrated marketing and customer service strategy, is: “We don’t have the resources for this.” This from companies who spend thousands – sometimes even millions of dollars and Euros on automatic systems that only serve to get users frustrated. [e.g “To speak with a human please hang up and go outside – it’s never going to happen here”] The other common lament is “If we go in there we will be bashed by all of those angry customers, and for that, we have the retailers. We like it when they shield us from unhappy customers.”

If people care enough to speak about your brand (good or bad), it means that they are emotionally attached to it. Even those who use Twitter or one of the many other social mediums to say “Hey brand name I could not give a damn about you!” they still hope that you will listen to them and act on whatever it is that’s frustrating them. Fundamentally, customers WANT brands to hear them.

To the “We don’t have the resources…” the answer comes in the shape of another question: “Can you afford not to be where your clients are?” But this is not the only problem facing brands who are not embracing Twitter, and Social Media, in general. There are, most definitely, bigger things at work.

Enter Google’s Real Time Search (what else?)

If you haven’t read about it yet, Google’s Real Time Search is simple to describe: You enter a search term and you get what is being said on Twitter (and other social mediums) about that search term. Live. Real time. Get it?

My friend mentioned above, Shelly Kramer, makes an extraordinary call to action on her recent blog post regarding Google’s Real Time Search and what it means to brands. In a nutshell, from now on when people, people who are NOT on Twitter, search for your brand they can see what others, from all over the world are saying about it. The good things AND the bad things.

The time for excuses is over. Brands who don’t get Social Media and who are not willing to embrace it will be severely affected by this. The time of being an option, a plan, something to think about is also over. Brands should get to it – like right now.

And if you are reading this and you work for Nokia, I would really like to review the N900. And I think that my feedback will be more than a little valuable to you. Hit me up on Twitter

What is your experience? Tell us in the comments!

Picture Credits: See-ming Lee under a CC License

Twitter is full of Spammers. In the last hour I received up to 21 notifications telling me I had new followers. 17 of those were spammers, 3 of those legitimate accounts and the last one was @SookieBontemps that mentioned my blog post regarding True Blood.

(If you are new to this blog I will tell you one important  thing: I like to have a clean followers list. I have declared a war on spammers since my account was wrongfully suspended. I also call them out on Twitter before blocking them using the #nomercy hashtag. @ShellyKramer is doing it as well. If you don’t follow her, you should)

That said here is a crash course on how to identify the new Spam accounts showing up on Twitter.

Meet the Ladies

Spam/Fake Accounts

At first these accounts look legitimate but,  if you put them all together can you spot a pattern? I can!  (And I love patterns)

The pattern here is that all of this accounts’s user names  end with 2 numbers.

Users sometimes put their age or year of birth at the end of their username but can you believe julibo12 is 12 years old? That aval was born in 1955? What kind of name is Abigaiirrh any way?

But let’s take this further shall we?

Following / Followers

Meet britneylo00 (notice the 2 numbers again at the end?)

1,088 followers and 143 following. Better yet, of those 143, 60% are Spam or Fake Accounts.

The same was valid for the other accounts that I checked: A big discrepancy in the Following/Followers ratio.

Ok I know what you are thinking: these are accounts new to Twitter. They are just starting their adventure in the TwitterVerse, they are hungry for information and they just want to make new friends. Right? Wrong!

Newbies that are Geeks

Newbies using API

Remember how I wrote that I love patterns? I found another with one Fake/Spam accounts: They get their Tweets™ mostly from News Feeds (Daily News and Celebrity Gossip seem to be the winners in what comes to delivering content to Spam accounts).

But what is even more interesting? They don’t Tweet™ from the web like a real newbie does, or from DestroyTwitter, HootSuite, Tweetdeck.
They Tweet from the API.

For this you need geek skills. High Level Geek skills. Like my mate @LeoLobato.  But Leo usually Tweets™ using TweetDeck.

Doesn’t that make you think?

Conclusion

Accounts that end with numbers + Following/Followers discrepancy + API Tweets™ + (a girl-next-door-photo) = Spam or Fake Accounts = Don’t Follow

Follow me on Twitter and tell me what you thought about this post. Or leave a comment please.

If you are wondering why I am using the ™ everytime I write Tweet™ check this post here

The talk at Twitter today was “Oh god, I lost 20 followers“; “20?! I lost 700 followers, how am I going to get them back now?“; “Just lost 345 followers. Twitter is acting up on me again #fail!” and so on, and so on.

Funny enough, the higher number of followers any given user had, bigger was their silence about loosing followers: Twitter vanity doesn’t allow it, I guess.

Apparently Twitter started a big spring cleaning last night. (As with everything around Twitter it only happens some months after it is actually needed) .

They did what they had to do: clean spam and fake accounts and in the process try to get some credit for doing it.

Of course they didn’t.

Twitter has turned into a race for the biggest number of followers no matter if they are legitimate users or spam bots.

So everyone kept complaining. And complaining. But I did not see a single tweet from anyone on TweetGrid saying:

@spambot42 Just stopped following 4242 people. What is going on @Twitter?

Doesn’t this make you think? Really! Doesn’t this make you think?

If you lost followers that means that someone on the other stopped following you!

How come those people were not complaining?
There is a very easy question to this one:

Because they were spam bots. And spam bots only exist to follow, and expect that the users go and click on their profile links.

So worry not about your lost followers because, the sad truth is, you never had them.

____________________________________________________________________________________

If you, like me, keep a tidy followers list, you didn’t have this problem.

I lost none of my followers because every day I “waste” my time checking who is following me and blocking those that I see that  are spam. It is worth it, believe me.

How to spot a Spam/Fake account:

1. The link on the profile is a tiny URL  and not a complete one

2. Profile picture is empty / young woman / young man

3. No interaction or

3.1 Interaction with other Spam Botsgiving the idea of a dialogue

*This post was inserted here at the Home of Zargon 2 days after the DoS attack on Twitter.