{"id":130245,"date":"2009-11-30T07:25:00","date_gmt":"2009-11-30T12:25:00","guid":{"rendered":"tag:blogger.com,1999:blog-7196788127833928948.post-6593436909688678938"},"modified":"2009-11-30T07:25:00","modified_gmt":"2009-11-30T12:25:00","slug":"interview-with-genapple-founder","status":"publish","type":"post","link":"https:\/\/mereja.media\/index\/130245","title":{"rendered":"Interview with GenApple founder"},"content":{"rendered":"<p>After the first article on the <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_0\">GenApple<\/span> site &#8211; which promotes itself as the first information brokerage, <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_1\">Shortinfosec<\/span> secured an interview with the founder of <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_2\">GenApple<\/span> &#8211; Mr. Mark Hanson.<\/p>\n<p>In a summary, the service will need polishing, and <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_3\">GenApple<\/span> will need to tweak procedures and operating rules as they go along.<\/p>\n<p>There may be security and privacy concerns &#8211; we are sure that the law enforcement agencies will be very interested to peek into the information being traded, as well as who is trading it. Also, on the other side of the coin &#8211; the information brokerage may be a place where illegal information is traded, so <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_4\">GenApple<\/span> will have to be very careful to walk the thin line between trading of illegal material and the pressure of law enforcement to know everything.<\/p>\n<p><span style=\"font-weight: bold;\">Read the full interview with Mark Hanson &#8211; <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_5\">GenApple&#8217;s<\/span> founder. For <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_6\">Shortinfosec<\/span>, the interview was done by <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_7\">Bozidar<\/span> <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_8\">Spirovski<\/span> <\/span><\/p>\n<p><span style=\"font-weight: bold;\"><\/span><\/p>\n<blockquote style=\"color: rgb(51, 51, 51);\"><p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_9\">Bozidar<\/span><\/span>: Let&#8217;s start with the person behind the idea &#8211; As I saw from your <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_10\">linkedin<\/span> profile, you are just 4 years out of university. Is this your first venture?<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: Yes. This is my first start-up venture. But I had the idea for this site about a year and a half ago, and have been developing it since then. We&#8217;re very excited about it: The team has been working very hard and we hope to deliver a quality service that people can use, enjoy and learn.<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_11\">Bozidar<\/span><\/span>: Could you describe the concept a bit more, <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_12\">of course<\/span> in layman&#8217;s terms &#8211; at first glance it sounds like e-bay but for bits and bytes<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: Sure: what we aspire to be is a place where people simply can buy and sell information and knowledge. At first glance, why would people pay for information or knowledge? The <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_13\">Internet<\/span> is filled with free information, from search engines, to answer portals, to e-learning portals. However, something is missing &#8211; every person throughout their years acquire a lot of knowledge, some of it has little to no value. But every person has knowledge that they possess that another person may want&#8212;in real life to gain this knowledge there might have to be a personal relation. But with our site; we seek to create a marketplace where people for the first time can sell knowledge and information that another party may want and pay for.<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_14\">Bozidar<\/span><\/span>: So what you are promoting is compensation for knowledge that someone has and others require?<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: exactly&#8212;right now there&#8217;s lots of knowledge that is not being disclosed on the <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_15\">Internet<\/span> because people feel it has value. For instance,  there are things you are willing to blog about for free&#8212;you write about security issues. However, you&#8217;re a businessman and there are many other things that you have acquired over the course of your life that you know that has real value. We seek a place where you can sell such knowledge, both privately, if you want and securely.<br \/>Yes there are many answer site, forums, etc and for many many questions, a free answer forum is good enough. However, we&#8217;re not just an answer forum, we hope to be a place where a broad amount of knowledge is shared<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_16\">Bozidar<\/span><\/span>: You touch an excellent subject with the forums &#8211; There are commercial forums that offer some form of expert knowledge when you subscribe. These are usually quite technical and with specific target groups in mind. What is your target group?<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: at the end&#8212;we hope to be the destination for any or all type of knowledge; however, starting out, we&#8217;ll focus on three verticals and expand from there<\/p>\n<ul>\n<li>(1) stock tips and financial knowledge, we want to have a monetary focus when we start so people who have knowledge or advice about investment <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_17\">strategies<\/span> can share. Because of US securities regulation, we&#8217;ll active monitor these listings to make sure that inside information is not disclosed or sold<\/li>\n<li>(2) news freelance &#8212; because of the nature of journalism in the US there are many reporters who are currently unemployed or underemployed. What we want is for people who are journalists, citizen journalists and so on to have a place where they can sell <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_18\">news stories<\/span> that they&#8217;ll write and the news organ<\/li>\n<li>(3) celebrity gossip and information&#8212;we wanted to have a fun and interesting vertical so people will check our site out and follow what is being disclosed on our launch.<\/li>\n<\/ul>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_19\">Bozidar<\/span><\/span>: The exchange of information will go through <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_20\">GenApple<\/span>. I&#8217;ll try to summarize the process as I understood it:<\/p>\n<ol>\n<li>The seller offers a <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_21\">commodity<\/span> (information) on the exchange<\/li>\n<li>The seller <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_22\">deposits<\/span> the commodity in the information vault<\/li>\n<li>The buyer and seller agree on a price and transfer funds<\/li>\n<li>The buyer pulls the commodity out of the vault<\/li>\n<li>The buyer receives the funds after a <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_23\">cool down<\/span> period for disputes<\/li>\n<\/ol>\n<p><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: Exactly: there&#8217;s obviously more detail and I&#8217;ll be happy to provide you with our animation intro that explains this, users can also view our &#8220;how it works&#8221; area. You are concerned with security, and this is utterly important for a business like this. Thus our website has been developed that each information vault is protected from hackers and people with bad intent. We are certified by <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_24\">McAfee<\/span>&#8212;we also use a <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_25\">SSL<\/span> certificate from <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_26\">Verisign<\/span>, so immediately when people are on our site, all transactions, from a simple search are secure.<br \/>We feel that as an &#8220;information brokerage&#8221; we should treat our customers as if they&#8217;re dealing with a bank or financial institution&#8212;information and knowledge is valuable. Moreover, when people sell information, they want to keep their identity private because of the nature of transaction&#8212;to us privacy is a form of security. We want people to know that if they use this site, their identity is kept safe and will not be disclose to anyone, period.<br \/><span style=\"font-weight: bold;\"><\/p>\n<p><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_27\">Bozidar<\/span><\/span>: You use a very strong statement there<span style=\"font-style: italic;\"> &#8220;protected from hackers&#8221;<\/span>. In the world in which I live, something hasn&#8217;t been hacked only because a hacker still hasn&#8217;t found the vulnerability to exploit or the interest in exploiting it. So for argument&#8217;s sake, <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_28\">let&#8217;s<\/span> say that a hacker manages to break in and he\/she\/they steal information or redirect funds. Do you accept any responsibility for the damages caused to the parties involved?<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: I do have confidence in our site&#8217;s security and <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_29\">McAfee<\/span> secure&#8212;we will do our utmost to protect the information that people have disclosed from us&#8212;as to your question, our user agreement <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_30\">discloses<\/span> precisely what responsibilities each party undertakes.<br \/><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_31\">Bozidar<\/span><\/span>: So on this particular site it is very wise to read the agreement, not just click the I Agree button?<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: What we want is for every use to read the user agreement and privacy policy before they sign up&#8212;we have links to these agreements in the registration page. The reason for this is that the user knows what to expect from us and also what we expect from every user. This marketplace depends on <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_32\">GenApple<\/span> to create a safe, easy, secure place to do a transaction.<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_33\">Bozidar<\/span><\/span>: In your first target group vertical you mention US regulation. On my attempt to register I saw that the registration address can only be a US address. Does this mean that every user of <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_34\">GenApple<\/span> needs to be under US jurisdiction?<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: For right now we&#8217;re limiting it to the United States; however probably very soon we&#8217;ll open it up to many different countries&#8212;this is party based on how we pay &#8211; we have two payment methods to pay sellers (1) <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_35\">PayPal<\/span> and (2) a bank check mailed directly to a user&#8217;s home. <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_36\">PayPal<\/span> is not available to every country and a bank check is limited to North America.<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_37\">Bozidar<\/span><\/span>: Not quite &#8211; google mails checks all over the planet<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: Google as a business does this&#8212;I&#8217;m not aware of a payment service that they have; however we prefer to use a Bank so our users are confident that the check they receive will be cashed. In the future&#8212;we could mail checks to users around the globe&#8212;if we reach that point, we&#8217;ll be happy to provide that service<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_38\">Bozidar<\/span><\/span>: Let&#8217;s talk a bit about the actual commodity &#8211; information what type of physical information can be stored in the data vault &#8211; text files, excel spreadsheets, images, encrypted files etc..is there a limitation? and <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_39\">of course<\/span>, to what size?<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: No limitation as to the type of files&#8212;we are looking at limitation right now&#8212;we also provide a textual entry area for people to disclose their information if it&#8217;s just a short sentence. So we&#8217;re still trying to set a balance and when we launch, we&#8217;ll note file size limitation within the information vault.<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_40\">Bozidar<\/span><\/span>: Well, since basically the actual information can be any type of file, you may be faced with a very unpleasant situation &#8211; the buyer agrees with the seller, transfers the funds and receives nothing useful so he disputes &#8211; or a far worse scenario: the buyer got what he requested, but he\/she still wants to cheat and disputes nevertheless. How are you planning on coping with &#8216;fraudsters&#8217; on both the selling and the buying side<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: Very good point&#8212;hence our business model: as we note up front, we are an &#8220;information brokerage&#8221; &#8212; we are dealing with the intangible unlike eBay or many site that sell tangible products&#8212;it&#8217;s much harder to police fraud when dealing with the intangible. The buyer wants to know that he or she is getting what he or she is paying for and the seller want to know they&#8217;re getting paid. Hence as a brokerage, we assist in every transaction, as the user agreement says, we are not a part of a transaction, but we do the following:<\/p>\n<ul>\n<li>(1) in every listing, potential buyers can ask the seller questions directly before they buy<\/li>\n<li>2) the buyer can look at the seller&#8217;s feedback rating and take that into consideration&#8211;with more positive feedback being good<\/li>\n<li>(3) besides the summary, there is the veracity statement, which is where the seller can state how he or she came to acquire such information or <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_41\">knowledge<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: So up front, we want to give the buyer as many opportunities as possible to make an informed purchase. However, we go to your point&#8211;what if the seller&#8217;s information is bad or the buyer unfairly disputes a transaction, hence our dispute system, which is noted in our user agreement&#8212;we take a look at the positions of the buyer and seller&#8212;and we make the final decision for them. This is a high standard, which we use to discourage buyer who unfairly file disputes. We want to protect our buyer&#8217;s as much as possible, and if it seems that fraud exists, then we&#8217;ll issue a full refund. Each dispute is a case by case basis&#8212;but each party agrees not to appeal <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_42\">GenApple&#8217;s<\/span> final decision.<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_43\">Bozidar<\/span><\/span>: A bit more on the content of information &#8211; if it is encrypted, then you may be facilitating transactions involving exchange of illegal information: like access passwords, or industrial secrets, plans to make bombs.<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: yes&#8212;all valid points&#8212;this goes into our privacy policy, You certainly know the concept of a safety deposit box. We treat every information <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_44\">vault<\/span> as a safety deposit box. If we as a service look into those vaults, then seller&#8217;s may feel <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_45\">insecure<\/span> from the get go, when people deposit into a safety deposit box, they want privacy. To combat possible illegal activities our best courage of action is thus to be diligent&#8212;any listing that we see that&#8217;s <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_46\">suspicious<\/span> (<span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_47\">sp<\/span>) will be deleted. We have on every listing page a report listing function, which any user can immediately file a report if such listing looks bad. If there is a dispute or an illegal transaction, as per the user agreement, we&#8217;ll comply with governmental authorities<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_48\">Bozidar<\/span><\/span>: So <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_49\">I&#8217;ll<\/span> speak the lingering question on <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_50\">every body&#8217;s<\/span> mind on your launch: Will the law enforcement and intelligence agencies get full access to all information vaults? I know that your policy states that you&#8217;ll supply law enforcement with information in case of investigation; But what about the broad view?<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: What we&#8217;re trying to do a strike a balance, which could change as the site matures. As per our user agreement, all vault are secure from us and the public unless there is a dispute or request from a law enforcement agency. We will not under any circumstance turn over private information or information vault unless forced to do so&#8212;we can only promise to take each instance as a case, and that&#8217;s all I can say at this point that&#8217;s not already disclosed in our user agreement, but you have a balance, seller&#8217;s must be confident in a privacy transaction.<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_51\">Bozidar<\/span><\/span>: You gave a good argument that you as an information broker actually cannot know what all transactions are &#8211; thus you are not responsible for any wrongdoing of the users. But still, the similar argument applied to Napster and the Pirate Bay &#8211; and yet, they got sued for facilitating illegal exchange of information.<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: We&#8217;ll in our user agreement, if someone does do something illegal, they are liable for our defence costs. But you are correct, there might be people who do illegal things. We&#8217;ll do our very best to create the best marketplace possible.<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_52\">Bozidar<\/span><\/span>: Are you actually worried that it may come to <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_53\">GenApple<\/span> being sued for situations similar to Pirate Bay? They did claim plausible <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_54\">deniability<\/span> but are now in prison.<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: All I can say is that we drafted our user agreement with your question(s) in mind, but I cannot speculate <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_55\">what&#8217;ll<\/span> happen in the future&#8212;no one knows<\/p>\n<p><span style=\"font-weight: bold;\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_56\">Bozidar<\/span><\/span>: Mark, i want to thank you for all the information we got on this interview. One last question &#8211; what does <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_57\">GenApple<\/span> stand for?<br \/><span style=\"font-weight: bold;\">Mark John Hanson<\/span>: Yes&#8211;<span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_58\">hehe<\/span>&#8211;every <span class=\"blsp-spelling-corrected\" id=\"SPELLING_ERROR_59\">Internet<\/span> company needs a name that&#8217;s short and memorable&#8211;the root &#8220;Apple&#8221; comes from the fruit of the tree of knowledge of good and evil.  I was looking for adjectives because obviously Apple is taken. I did find the &#8220;gen&#8221; is British slang for information, hence the word <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_60\">genapple<\/span>.<\/p><\/blockquote>\n<p><span style=\"font-weight: bold;\">Do you like this product? What security concerns might you have on <span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_61\">GenApple<\/span>? Please add your 2 cents in the comments.<\/span><\/p>\n<p>Related posts<br \/><a href=\"http:\/\/www.shortinfosec.net\/2009\/11\/genapple-first-glance-at-first.html\"><span class=\"blsp-spelling-error\" id=\"SPELLING_ERROR_62\">GenApple<\/span> &#8211; First Glance at the First Information Brokerage<\/a><\/p>\n<div class=\"blogger-post-footer\"><img width='1' height='1' src='https:\/\/blogger.googleusercontent.com\/tracker\/7196788127833928948-6593436909688678938?l=www.shortinfosec.net' alt='' \/><\/div>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~r\/shortinfosec\/~4\/M-3eRS5n_RQ\" height=\"1\" width=\"1\"\/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>After the first article on the GenApple site &#8211; which promotes itself as the first information brokerage, Shortinfosec secured an interview with the founder of GenApple &#8211; Mr. Mark Hanson. In a summary, the service will need polishing, and GenApple will need to tweak procedures and operating rules as they go along. There may be [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-130245","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/130245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/comments?post=130245"}],"version-history":[{"count":0,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/130245\/revisions"}],"wp:attachment":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/media?parent=130245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/categories?post=130245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/tags?post=130245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}