Monday, 6 April 2009
Sunday, 5 April 2009
Saturday, 14 February 2009
Credit and debit card fraud is a huge problem which affects many people in a direct, personal way. A typical fraud is to make a card with stolen details and use it in a foreign country. This can be done simply by making a copy of the relevant data from the magnetic stripe and cloning it onto a new card.
Card issuing banks have recently attempted to reduce the incidence of this type of fraud by applying rules to prevent transaction authorisation under certain conditions, such as a transaction's source being a different country than the residential country of the cardholder; or limiting the aggregate value of transactions per 24 hour period.
How can this situation be improved for both the banks and the cardholders?
To allow cardholders to safely use their own cards when travelling, some banks request that cardholders notify them when travelling, so that their risk systems will not create "false positive" fraud suspicion when the cardholder is attempting to make a legitimate payment. The problem with this system is that it requires every single cardholder to remember to inform their bank, which is not an automatic behaviour -- it can only be learned after experiencing the inability to use a credit card on multiple trips abroad. It is also inefficient, as at some point in time, the cardholder has made arrangements for the travel, and the information about the trip date and duration is already in a computer somewhere.
Sweden's Handelsbanken is taking the lead here, by allowing their customers to manually set permissions for internet or foreign purchases on their e-banking website:
A better way?
Recently some startups have provided the ability for travellers to enter or upload their travel itineraries and add contacts. So far it seems social networking is the main impetus for these startups; however, coordinating travel with other systems would be a benefit. You can see where I'm heading: Dopplr and Tripit should allow a user to link their credit card issuer to their account, so that the card issuer's risk system will automatically receive timely advance notice of a cardholder's travel plans.
To make this happen, the Dopplrs of the world should provide an interface for bank risk systems to access. Online credit card management sites could then:
- build a UI to allow the cardholder to provide travel management site credentials
- integrate to travel management system to pull down itineraries on a regular basis
- feed itinerary information into the bank's risk system to be used by its rules engine
- The travel management sites need to attract more users, and this is a useful function for prospective users.
- The risk managers at banks need to reduce fraud levels, and they could tighten their risk systems if they had better information about the physical locations of their users. Presenting a financial upside to their management should make it easy to justify the integration expense.
So far Tripit seems to have the upper hand, as they allow the user to upload an itinerary from a travel agent or airline to their site. Eventually, booking sites might allow a user to provide their travel management site credentials (i.e. Tripit username and password) and have their bookings automatically fed from the reservation system to the management site then on into the
An even easier alternative for the traveller might be possible with Google's Latitude system. It would be technically possible to implement this scenario:
- User adds their credit cards to a Google account using Google Checkout.
- User enrols in Latitude and deploys it to their smartphone (e.g. Android device with GPS), set to automatically update their location.
- When Latitude detects the user has moved into a new country, it looks up the card issuer of each stored credit card, and then informs the issuer's risk system of the cardholder's current location.
Making full use of travel management or location management systems will bring a variety of benefits:
- Integrating a user's telecommunications preferences with their realtime location. A user can choose to have calls to their home phone routed to their mobile when they are out of the country, or sent straight to voicemail with a customised message. Alternatively they could route calls to different mobile phone accounts to avoid roaming charges when in certain countries.
- Postal and parcel delivery services could be instructed not to attempt delivery when the recipient will be away, to prevent lost and stolen packages, and wasted time on futile delivery attempts. I admit that given the level of sophistication of most national mail services this may be a bit ambitious at the current time, but it's not beyond the realms of belief for private delivery services, especially when their payloads are of higher value or sensitive information.
- Discount/promotion notification: some countries may offer special deals to foreign tourists. Currently Dopplr has user-generated "tips" for city locations; these could be more useful if you saw them in context rather than only while entering a new itinerary. There is already plenty of discussion about location-targetting for adverts and offers, of course.
Wednesday, 5 March 2008
Last.fm is great site for finding out more about music, for recording your own music preferences, and potentially connecting to others with similar preferences. I've not used the latter function, although it is interesting to see how many people out there have eerily similar music preferences.
Interestingly, I see Google has tentatively moved into the same field with Music Trends, a Labs project. It's nowhere near as fully featured as Last.fm, but certainly one can see the potential there. Similarly, they use a local client (in this case Gtalk) to snoop on a music player to upload the playstream to the server.
The links from the Trends page lead to an artist/song customised search result page. I had rather hoped to see a Trends-like chart showing temporal popularity, but I suppose they're not implementing the infosthetics fodder first and are concentrating on the basic features. Certainly looks like the monetisation is not going to be an afterthought, here!
For now, last.fm is safe since it offers song previews and you can usefully tag songs. Usefully, last.fm artist/song pages often rate highly in search results too. Perhaps music is too specialised to have a generic solution be worth using!
Sunday, 24 February 2008
I've been using a ThinkPad T60 at work for the last year and a half, and when I first got it, I thought it was fantastic -- very responsive, hardly ever crashed, and the battery life is quite good.
However, I now find that startup -- whether resuming from standby or cold booting -- is an interminably long process. This is probably partly because NTFS gradually degrades due to fragmentation (something that defragging now and then doesn't really seem to affect in a perceptible way), but the reasons seem to be different depending upon whether it's bootstrapping or resuming (more posts than you can shake a stick at here).
When bootstrapping, the execution of multiple applications seems to kill performance, mainly due to disk access requirements. Whether this is due to multiple processes trying to load libraries at the same time, bad virtual memory implementation (perhaps also a side effect of the massive paging file being easily subject to fragmentation), or no prioritisation between background app loading to guarantee UI responsiveness, I don't know, and frankly don't care. A good analysis is here on the ThinkPad forums, including recommendations for removing various superfluous ThinkVantage startup software items.
When resuming, I've found the biggest improvement was to disable the anti-virus service that came pre-installed by the company IT department (in this case, Trend Micro OfficeScan). This service seems to cause at least five minutes of disk thrashing as it does some sort of resume-check. It could be that this is due to the interaction of the scanner with some other software, like Skype, but disabling the service does mitigate the problem to some extent.
Perhaps this is due to Microsoft not coordinating with software vendors to really test OS responsiveness under real-world conditions: namely, having multiple programs installed and frequently sleeping and resuming. One shouldn't have to dig into the registry to disable prefetch as a matter of course (it didn't work for me anyway).
The sad thing is that my old Apple Cube (literally a museum piece), with a 1.7GHz PowerPC CPU accelerator installed, seems faster and more responsive than my T60. Good news though, James Fallows is finding the MacBook Air a more than adequate replacement, and some former MS junkies now catalogue the reasons to switch to a Mac!
Saturday, 23 February 2008
I like sharing ideas and news that I find interesting with a few others who might be similarly interested. A long time ago this was just by email but for a while I've been using del.icio.us both to record bookmarks so I can find them quickly later, and to share them with a few friends who have added me to their network.
Friday, 22 February 2008
Since I've relatively recently transitioned from an engineering-focused career into a product management role, I'm interested in the interface between purely technical skills -- such as those excelled in by "geeks" -- and communications skills -- yes, that's what schmoozers do.
This article in the FT ("CDO buffs who schmooze could resolve a financial mess") shows that the distinction between communicators and technicians is a tension that exists in other thought-based industries too. I've been working on my schmoozing skills a lot: if anything, a product manager has to do loads of schmoozing since nobody actually reports to them, and therefore to get any work done, coercion of engineers (or financial product designers) is not an option. Some other product managers I have worked with have not got the technical background but are great communicators, and have to work hard to understand the technical nature of a problem in order to understand how to make a decision.
Which is more effective, a geek who studies communication skills to transmit their message to a wider audience, or a schmoozer who somehow picks up enough understanding of a domain to not only gain the respect of the local geeks, but also can make better decisions than them?
In my experience I've seen more of the former than the latter. A schmoozer who knows how to use geeks is common enough, but I haven't seen many examples of a person with a predominantly communication-oriented mind manage to pick up an easy facility with abstract concepts and models. Good MBA courses are supposed to be able to take a marketing grad and churn out an investment banker, but I'm a little sceptical of this (although I would love to have my scepticism proven wrong!).
Of course, all this is a simplistic view of what Simon Baron-Cohen has been working on: the tendency for a brain to be systematising or empathising (EQ SQ theory). Whilst he noted that there are statistical tendencies for men to be more systematising and women to be more empathising (something James Watson has been slated for supporting, judge him for yourself), it seems to me that many men tend to be heavy empathisers ("I just never understood math") and plenty of women are strong systematisers (Hillary Clinton springs to mind).
Will there be a simple way to understand and identify why this is in the future? Presumably brain wiring is a phenotype and the underlying genetics can be determined one day; will optimum training techniques for those with a perceived deficit in one quotient be developed? I think so.