The British People Have Spoken … and That’s Bad News for Tech
Posted: July 15, 2016 Filed under: Uncategorized | Tags: brexit, chatham house, CJEU, compliance, cyber security, EU, eu referendum, european union, GDPR, infosecurity magazine, investigatory powers bill, KPMG, medivisas, snooper's charter Leave a comment
It’s hard to find an optimist in the cyber security industry in these post-referendum days. I spoke to a fair few for an upcoming feature for Infosecurity Magazine and the consensus seems to be that a Brexit will be bad for staffing, the digital economy and the financial stability of UK-based security vendors.
That’s not even to mention the legal and compliance implications. Chatham House associate fellow, Emily Taylor, recommended firms continue on the road to compliance with the European General Data Protection Regulation. Aside from the fact that any firms with EU customers will still need to comply with the far-reaching law, she reckons that if we want to protect the free flow of digital information between the EU and UK, we’ll need to continue following European laws in this area.
Snoopers gonna snoop
However, a Brexit would cause other problems, notably in that the current Snooper’s Charter looks like it will enshrine in legislation the principle of bulk surveillance – the very thing which effectively led to the scrapping of the Safe Harbour agreement between the US and EU. If this bill goes through as is and we go out of Europe but stay in the single market, we’ll have to change that bit, Taylor told me.
“A case brought by David Davis and Tom Watson questioning the legality of bulk surveillance powers under the old DRIPA laws is currently being considered by the CJEU,” she explained.
“It’s not clear which way the CJEU will go on this, because many member states have lined up to support the British approach. However, if CJEU follows its recent decisions, it could strike down bulk data collection. If we wanted to stay in the single market, we’d have to amend our IP Bill in response.”
Even if we broke away from Europe completely and adopted the status of a “third country” like the US, we’d still have to adopt measures “to give equivalent protection to EU citizens’ data as they enjoy within the EU,” she argued. And bulk surveillance would certainly be a no-no in this scenario.
The uncertainty – which could continue potentially for years while Brexit deals are worked out – is also viewed by many as damaging to the cyber security industry, and tech in general. Immigration lawyer and partner at MediVisas, Victoria Sharkey, claimed firms may be unwilling to employ skilled workers if there’s a chance they might have to leave in a couple of years’ time.
“This is certainly going to be the case where significant training and investment is involved,” she added.
In fact, EU nationals are apparently already packing their bags.
“I am already seeing EU nationals who have been here for years make plans to leave and either go home or go to another EU country. They are worried for their jobs, are worried that they will be told to leave and so would rather leave on their own terms, and they are also being made to feel unwelcome,” Sharkey continued.
“I feel that when we do leave that it is going to become significantly harder for UK employers to encourage the best in their industry to come and work in the UK.”
This, for an industry which has always struggled with skills gaps and shortages, is potentially catastrophic.
Can we overcome?
Philip Letts, CEO of global enterprise services platform blur Group, has run businesses in Silicon Valley and the UK. He also pointed out the potential damage that political and financial uncertainty could have on the industry.
“The politicians are in unchartered territory. We don’t yet have a clear timetable for the triggering of Article 50, nor the trade deals that are going to have to be negotiated. There is a political vacuum. Business confidence is low and many will hunker down, try to avoid risk and wait for this to play out,” he told me.
“Globally, the US tech heavyweights will want to remain in the UK and the EU, and they will do both, operating across different European centres. But the EU market is more lucrative than the UK, so things may shift over time.”
So is the tech and cyber security sector really doomed? Not so, according to KPMG UK head of technology, Tudor Aw.
“I believe the resilient UK tech sector can withstand the challenges of Brexit and thrive,” he told me.
“Technology is increasingly a key sector that underpins all other sectors – whether it be back office systems or strategic enablers such as IoT and data analytics. Companies will need to invest in technology to drive efficiencies and strategic growth – one only has to look at developments across a diverse range of sectors such as healthcare, automotive, property, retail and the military to see that technology spend will only increase regardless of Brexit.”
It’s a moot point now, but I wonder how much better it could have thrived had we not voted out on 23 June.
China’s Censorship Supremo is Gone, But Little Will Change
Posted: July 8, 2016 Filed under: Uncategorized | Tags: beijing, censorship, charlie smith, china, china censorship, chinternet, circumvention central, communist party, great firewall, greatfire.org, internet freedom, lu wei, Shigatse, UN, VPNs, xi jinping, Xu lin Leave a comment
China’s head honcho when it comes to censorship recently stepped down. This being China, no-one seems to know whether he was effectively sacked, or asked to move to a new bigger and better role. But what we do know is that things aren’t going to get any better for those inside the Great Firewall.
Over the past three years, Lu Wei has been a constant thorn in the side of rights groups, diplomats and Silicon Valley bosses. His aggressive defence of China’s sovereign right to do with its internet what it sees fit – most notably at the laughably titled World Internet Conference in Wuzhen – has been jarring at times. The Cyberspace Administration of China (CAC) he headed up also runs root CA and .cn operator the Chinese Internet Network Information Center (CNNIC). As such, it was blamed by Google last year for issuing unauthorized TLS certificates for several of its domains, which were subsequently used in man-in-the-middle (MITM) attacks.
Even more damning, the CAC was accused of launching Man in the Middle attacks on Outlook users last year in response to its migration to HTTPS, which the authorities can’t monitor. And then it was pegged for a DDoS attack on anti-censorship organisation Greatfire.org – a constant thorn in the side of the authorities in Beijing.
I spoke to Greatfire.org co-founder Charlie Smith about the reasons for and implications of Lu’s departure.
“If it ain’t broke, don’t fix it, right? We probably just had the quietest anniversary of Tiananmen [Square massacre] yet, in terms of online dissent and discussion. There is more censorship in general. Less circumvention because of a crackdown on VPNs. And fewer foreign companies are trying to challenge the status quo,” he told me via email.
“We know controlling the medium is pretty near the top of [president] Xi Jinping’s agenda. So why make a change now? The timing likely indicates that this was a planned and not a rash decision. There was no need to unsettle things before the 4 June anniversary and the change happens well before the next ‘World’ Internet Conference in Wuzhen.”
Smith went on to argue that, even though Lu presided over an unprecedented crack down on internet freedom – primarily through a new regulation banning the spread of “rumours” online – he didn’t go far enough.
“Lu was not perfect. As we have shown, it is impossible to completely block all information for those inside China,” Smith continued. “Maybe in this regard, Lu was being blamed and Xi decided he wanted somebody who can get the job done. Maybe Xi was upset about being ‘vilified as a murder suspect’ and could not comprehend why Lu Wei was unable to scrub information from the Chinese internet.”
Lu’s removal, if that is what it was, may also have been an attempt by Xi at curbing his growing influence – after all, propaganda is at the heart of the Party’s power and everyone inside knows it. His replacement, Xu Lin, is a Xi Jinping acolyte and one time deputy secretary of Tibet’s Shigatse Prefecture who will certainly toe the presidential line.
As Smith put it, “if Xu Lin fails to quell ‘rumours and slander’ Xi does not have to second-guess whether or not Xu is doing everything within his power to stop these attacks.”
So what prospects for the future? Pretty grim if you’re inside China and are a fan of human rights and internet freedom.
Beijing was one of a few countries – Russia, India, Indonesia included – that voted against a non-binding resolution at the UN this week stating all individuals must be afforded the same rights online as offline and that the universal right to freedom of expression should be upheld online.
As Smith said, if Xu Lin “handles information control on the Chinese internet the same way the authorities handle information control in Tibet then the situation could even get worse.”
There is some hope for businesses and individuals which need to leap the Great Firewall.
Greatfire.org itself this week launched Circumvention Central, a new site designed to provide real-time info on which VPN is the best performing and most stable in your area.
The hope is that it will encourage greater use of VPNs and help developers improve their circumvention products, as well as provide a much needed additional source of revenue for Greatfire.
The concern is that if it gets popular enough, Beijing will do all it can to put it out of action.
Foxconn and the Bot Army Ready to Go to War with the UK Workforce
Posted: June 21, 2016 Filed under: Uncategorized | Tags: apple, china, five year plan, foxconn, IHS, industrial bots, robots, workforce Leave a comment
News emerged a few days ago that Foxconn had effectively laid off 60,000 workers in China and replaced them with robots. “So what?” you might think. And to be honest, if it keeps the cost of our tech devices down, then good for Foxconn, right? Well, unfortunately it’s not that simple.
The changing dynamics of the Chinese labour market could have a profound effect on us here in the West, and even portend similar disruption to our own workforce in the not-too-distant future.
These stories have been doing the rounds for years because – well – contract manufacturers like Foxconn and others have been investing significant sums into robotics for years. Why? The answer’s pretty simple, according to IHS analyst, Alex West.
“Robots don’t need to stop working, but they don’t get drowsy, distracted or depressed either, so quality and consistency of manufacturing is enhanced. With the developments in AI and predictive analytics, robots are also far less likely to get ‘sick’, reducing downtime,” he told me.
To that I’d add that they don’t go on strike, commit suicide or complain to the papers about poor working conditions – all problems Foxconn for one has encountered. But robots can also add value in other ways, such as helping firms win business from their rivals, according to West.
“Robots are evolving, becoming more intelligent as AI solutions help them to ‘learn’ on the job, but also becoming far easier to program and integrate on production lines,” he continued. “Collaborative robots are also making robotic solutions safer and easier to install without the additional safety concerns and equipment.”
There’s clearly a drive for this in China, the tech manufacturing centre of the world. The Chinese government has made investment in robotics a priority in its 13th Five-Year Plan, with IHS forecasting a 30% CAGR. But this threatens to create social instability as human workers are shelved in favour of machines. Foxconn and others claim bots are only used for repetitive tasks that humans don’t want anyway. But there’s no guarantee that there are enough skilled roles to fill the gap.
“Dull, repetitive jobs on the plant floor will be replaced by a range of higher-skilled positions such as robot/systems integrators, programmers, and data scientists supporting enhanced AI,” argued West.
“However, there will be less of these more advanced roles, and some of the type that existing workers will not have the skillsets to be able to transition to.”
This might seem a long way from the UK. But our workforce is also facing a robot invasion – not from these industrial bots, but service robots like Softbanks’ Pizza Hut-serving Pepper. In fact, a Deloitte study has claimed that 35% of UK jobs have a high chance of being automated in the next decade or two.
Robots still only account for 0.3% of all machinery produced in China last year, according to West, so there’s still a long way to go. But it’s probably time to start getting nervous in the UK.
Can Surface Rescue Microsoft’s Mobile Plans?
Posted: May 24, 2016 Filed under: Uncategorized | Tags: android, apple, foxconn, IDC, iOS, lumia, microsoft, microsoft mobile, smartphone, windows mobile, windows phone Leave a comment
What is Microsoft’s future in the mobile space? It’s a question that’s generated more than a few column inches over recent years. Now with Redmond agreeing to sell the feature phone division to Foxconn and licence the Nokia name, things have perhaps started to get a little clearer.
First, the bad news. IDC is predicting Windows Phone’s market share for 2016 will stand at just 1.2% this year – that’s down from 2% last year, 2.7% the previous year, and 3.3% in 2013. The firm is clearly not getting any OEMs on board for future devices anytime soon, and there was no mention of new Lumias in the Foxconn announcement – just that it would support current devices. From this – and speaking to a few experts for an upcoming feature – I think the smart money’s on a Surface handset.
Surface has done pretty well in the tablet/laptop space – albeit after a few iterations. And a high-end Surface handset would show off the best features of Windows 10 Mobile, as Microsoft finally harmonises its OS across all platforms. It could have crack at competing with the Samsung Galaxy range and potentially the iPhone. Whether this is enough to prop up Microsoft’s mobile hardware business is unsure, however, and more job cuts could be on the way.
A Surface smartphone could appeal in particular to business executives and the like, according to IDC analyst Susana Santos. “It’s a strategy that makes sense, but it takes time. It’s too early to say if it’ll work or not. It certainly won’t help with its volumes. These devices are more expensive and not as easy to sell,” she told me.
With the business market set to rise only to 20% of the global smartphone market, according to IDC, this is also a concern if Microsoft can’t persuade those BYOD consumer/employees to migrate away from their iOS or Android handsets. It’s been said many times before, but Microsoft is in many ways still a victim of its lack of vision a decade ago, which let Apple and Google steal the hearts, minds and wallets of consumers.
And what of its chances of getting those sought-after OEMs on board?
“Of all companies, Microsoft knows the value of a developer and application ecosystems, but has been poor to drive this agenda in the mobile realm. I’d expect it to continue with Windows phone, but play mostly in the higher-end,” Quocirca’s Rob Bamforth told me by email. “The words it has used seem to indicate an interest in mobile computing devices, with telephony capabilities, rather than emphasis on ‘handsets’, so I think that means higher-end pricing and positioning – and perhaps a closer connection to Lync/Skype for Business and Skype Meeting. Perhaps we might be looking for a Skype Surface.”
The question is whether Redmond can maximise its IP and engineering talent in this space, “gluing the bits together in a way that Apple seems to mange elsewhere”, according to Bamforth. If it can, it’ll be the greatest comeback in the history of computing.
With Virtual Reality, the Future’s Closer than you Think
Posted: April 22, 2016 Filed under: Uncategorized | Tags: AR, augmented reality, British Museum, cio, Hololens, HTC Vive, microsoft, Oculus rift, Samsung Gear VR, virtual reality, VR Leave a comment
What does the future of virtual reality hold? I’ve got to say it’s not a question that has particularly bothered me from a corporate IT perspective – a feeling I’m sure shared by many CIOs out there. But the truth is that VR – and its slightly more sensible cousin, augmented reality – is already beginning to transform the way organisations work and engage with their customers.
Putting together a recent feature for IT Pro in Hong Kong, I spoke to several experts about the kind of use cases that VR and AR might best fit, and some of the key challenges facing manufacturers.
It’s pretty clear from most of the analysts I spoke to that those smartphone-based VR headsets like Samsung Gear VR and Google Cardboard are going to get end user traction much quicker than the high-end Oculus Rift, HTC Vive and others.
“Everyone has a smartphone so it makes the entry barrier for VR very low and affordable,” IDC European associate director, Chrystelle Labesque, told me. “Does it offer the best experience? Maybe not. But it does give people the chance to have their first VR experience.”
From a manufacturer’s point of view, each major player in the space – and virtually all of the world’s biggest tech companies have a stake in VR/AR – faces a difference set of challenges according to their commercial priorities, argued IHS Technology head of games research, Piers Harding-Rolls.
Samsung, for example is using VR to drive sales of its premium smartphones, he told me.
“We have already seen Samsung diversifying further with the Gear 360 camera to build of its VR ecosystem offer and to continue to differentiate as more and more smartphone vendors bring their own VR headsets to market,” Harding-Rolls added.
“Samsung is now using the Gear VR as a promotional and bundling tool to sell more phones, but the value of this offer may become diluted over time. So for Samsung the challenges centre on staying differentiated and building out the ecosystem successfully in the face of additional competition.”
As for those high-end players, it’s all about trying to drive down their prices to appeal to a broader market.
“Oculus has courted developers for over two years, but still does not have the scale of distribution and user base of Valve’s Steam or Sony’s PlayStation Network, so must build its own content and compete from a less established position,” he claimed. “As you can see the challenges differ from platform to platform.”
But this is talking about VR/AR from a consumer-focused perspective. The truth is that it’s already being used both inside companies and to create differentiated experiences for customers.
Labesque referenced a British Museum project last year that allowed visitors to experience the Bronze Age through Samsung Gear VR headsets, for example.
The Marriott hotel chain has also been an early adopter – using the power of Oculus Rift VR to transport users to far flung destinations, and in so doing build its brand and even drive potential sales.
When it comes to internal use cases, AR has the edge, according to the experts. Digital overlays can help with training, working to meet strict compliance requirements, and collaboration, among other things, Labesque explained.
On this front, Microsoft’s Hololens already has some impressive big name case studies to brag about.
So there you have it. If you’re a CIO and have the money and motivation – VR/AR is probably something you should be considering right now as part of a multi-year innovation project. If not, it won’t be long till your CEO is knocking at your door to find out why.
How Long Before We Get to Live in Genuinely Smart Homes?
Posted: March 31, 2016 Filed under: Uncategorized | Tags: alexa, amazon echo, apple, google, HomeKit, Nest, samsung smartthings, smart home, strategy analytics Leave a comment
What will the smart home of the future look like? Despite drawing the crowds at CES this year, it’s clear that the industry is still in its very early stages. Yes, the big boys are all involved – Amazon, Apple, Google et al. – but at the moment it’s a messy hotchpotch of competing standards, point products and exaggerated claims.
I may be biased of course, as my house is about as dumb as you can get – save for a couple of Sonos speakers dotted around the place.
But where I see things really coming together over the next few years is when we start to get more industry alliances, partnerships and/or M&A to consolidate competing platforms. At CES more than 10 smart home vendors announced integration with Amazon’s Echo/Alexa, for example, which begins to tie together a bunch of disparate tools for the smart home. Apple’s HomeKit, Google’s Nest ecosystem and Samsung SmartThings all have similar potential.
Strategy Analytics’ senior analyst, Joe Branca, claimed the biggest challenge facing the industry as a whole is finding a business model that works for vendors and their customers.
“The price point for solutions offered by traditional security companies helps to prevent a lot of consumers from buying into the smart home concept,” he told me when I interviewed him for a recent feature article.
“Our data shows, however, that there’s a strong interest in the benefits offered by security and smart home solutions – not to mention digital health and elderly care solutions – but at a lower price point than what’s available in the market at present.”
However, there may be other ways to subsidise the cost for consumers – for example, by getting insurance companies and marketers on board. The latter would be prepared to access user-generated data while the former benefit from more safe and secure houses, he claimed.
“Other big challenges have to do with customer service and installation,” Branca added.
“With multiple product and service offerings part of a single smart home ecosystem, consumers want to know who they will speak to when they need assistance. With regard to installation, DIY products have gotten a lot of praise, but we believe that to succeed with a mass market offering, installation by trained professionals is key.”
That’s a problem the Silicon Valley giants may need to partner up on to solve.
So what of the future?
Branca reckons more personalised, seamless, user-friendly experiences. I’d agree, but I think the usability and interoperability problems will still mean homes full of point products rather than smart ecosystems. As for the vendors, he argued that firms will end up transitioning to service-based business models.
“The real opportunity for smart home is in services that generate recurring revenue, and not simply the sale of hardware,” he concluded. “In the US, the security model is well-established. However, there is both an opportunity for security services that don’t fit the traditional mould – i.e., services that are lower cost and/or are a better match for renters or apartment owners – and services outside of security, including home maintenance and repair, for example.”
Long story short: I can’t wait for the smart home of the future, but I think I’ll be forced to for several years yet.
Data Protection Day: Shot in the Arm or a Waste of Time?
Posted: January 22, 2016 Filed under: Uncategorized | Tags: data privacy day, data protection, data protection day, gemalto, ICO, infosecurity magazine, privacy, rackspace, varonis Leave a comment
It’s Data Protection Day next Thursday if you hadn’t noticed, and you’re forgiven for not doing so. I only remembered about it after researching an analysis piece today for Infosecurity Magazine.
The idea is to raise awareness among consumers to think twice about leaving a bigger digital footprint online than they already have, and to try and get businesses to take data privacy more seriously.
On both counts it’s a challenging prospect, according to many of the experts I spoke to.
David Gibson, vice president of strategy at Varonis, told me that improving privacy protection all comes down to better monitoring of fraud abuses.
“The proof that traditional methods don’t work is in the increasing frequency and magnitude of data breaches related to unstructured data,” he argued.
“Not only is there more data to worry about, but it’s containing more sensitive and valuable information and it’s getting easier for attackers to exfiltrate that data since it’s typically not monitored. If what you’re trying to steal isn’t being watched, you have a much better chance of getting away.”
Rackspace senior director of legal, Lillian Pang, admitted that firms still don’t prioritise data privacy at a board level, and this needs to change if things are to get better for consumers.
“Only then will firms start taking it seriously and filter down the privacy compliance needs to the ground level of its business. In some respects, you could say that privacy needs to be led from the top level of any business and administered from the ground level,” she told me.
“Many firms pay lip service to the importance of data privacy but few really understand or recognise that a robust data privacy program in a firm solidifies its information security and helps to further safeguard the firm’s business.”
The EU General Data Protection Regulation could be the push that many firms need to start taking the issue seriously, according to Gemalto data protection CTO, Jason Hart.
“The EU Data Protection Regulation is set to be finalised later this year, but companies need to start taking the steps to change how they protect their data now, otherwise they could find themselves subject to compliance penalties, and also put their reputation and consumer confidence at risk,” he warned.
“As the reporting requirements of the new EU regulation make data breaches more visible, we can expect the economic and business consequences of a breach to continue to escalate, so businesses need to start taking steps to ensure they are prepared for when new regulation comes into force.”
So are awareness raising exercises like Data Protection Day even worth the effort? Well the general consensus is that anything like this is probably a bonus, although the jury’s out on how effective it can be.
“Although Data Privacy Day is a great opportunity to raise awareness of the issue, understanding the importance of protecting data needs to be an all year round initiative,” said Hart. “Businesses need to realise the importance of the data they hold in their systems and how the loss of this can impact their customers.”
Data Protection Day (Data Privacy Day in the US) is on 28 January.
Why Abuse of Digital Certs and Crypto Keys is the Biggest Security Threat for 2016
Posted: December 11, 2015 Filed under: Uncategorized | Tags: 2016 predictions, CISO, cryptographic keys, cyber security, digital certificates, information security, infosecurity magazine, kaspersky lab, signing, snowden, sony pictures hack, stuxnet, venafi Leave a comment
If there’s one major security trend of 2015 I’d predict causing even more trouble next year it’s abuse of crypto keys and digital certificates. Cybercriminals have simply found that abusing this layer of the internet is far easier, cheaper and often more effective than more traditional forms of attack.
Digital certificates stolen from Sony Pictures were later used to sign malware in order to make attacks more effective; and the same technique was linked to the Anthem and Premera healthcare breaches in the States.
And of course it was a similar strategy which contributed to the success of the Stuxnet attack.
Kaspersky Lab even said this week that the number of new malware files it detected this year have actually dropped, as hackers instead use stolen or bought digital certs to achieve the same ends.
Kevin Bocek is chief security strategist at Venafi – a firm which helps secure cryptographic keys and digital certs. He told me these foundational layers of trust on which the internet rests are being undermined by the latest developments in the black hat community.
“We’ve all seen that movie scene where the bad guy dresses up as a painter to gain access to a building; this is now what is happening in the cyberworld,” he told me.
“Bad guys are trading keys and certificates on the dark web and using them to crack into company systems – just look at Sony, the Snowden revelations and Stuxnet. They all involved stolen or misused keys and certificates.”
It doesn’t bode well for the future, with even current systems being architected in the same way – based on digital certificates.
“My concern is that moving forward industrial control centre malware could become bioweapons,” Bocek claimed. “This is because the moment you sign the malware with a valid certificate, it is essentially like a bio weapon. In the current climate, that’s frightening.”
That’s not all. The burgeoning Internet of Things space is ripe for exploitation in the same way, with cybercriminals likely to hold firms ransom by effectively taking over their smart devices.
“By taking a code-signing certificate and changing the entity it obeys, a hacker can change the firmware on a smart device to take control of it. Now when that sensor or smart device calls back to the ‘mothership’ who does it trust? The bad guy,” he explained.
“From a single point of compromise – the digital certificate – hackers and cybercriminals can take over a whole network of hundreds, thousands or even millions of smart ‘things’. This can then be used to blackmail companies – either cease operations, take on huge disruption, or pay up.”
Now, Venafi certainly has a vested interest to talk up the potential damage that abuse of certs and keys could effect.
But this is already happening in the wild with real consequences for organizations and their customers around the world.
Unfortunately 2016 is likely to see things get a lot worse before CISOs start to give this their full attention.
Is Groupon Doomed to Fail?
Posted: November 26, 2015 Filed under: Uncategorized | Tags: amazon, cautionary tale, daily deals, e-commerce, ebay, flash deals, gartner, groupon, IDC, IT Pro, retail, wall street Leave a comment
Daily deals giant and one-time darling of Silicon Valley, Groupon, is having a hard time of it. An IPO in 2011 raised a whopping $700 million, apparently more money at the time than any US firm since Google. But more than four years after the flash deals specialist was valued at nearly $13 billion, there’s very little to celebrate.
In September, the firm announced over 1,000 job cuts as part of its ‘One Playbook’ plan to cut debt and kick-start growth. Its CEO has moved across to chairman and the firm is quitting several markets including Morocco, Panama, the Philippines, Puerto Rico, Taiwan, Thailand and Uruguay. In November the firm’s shares plummeted 27% after it forecast 2016 revenue of $2.75 billion-$3.05 billion, below analyst estimates.
So what went wrong? I’ve been chatting to analysts for a piece in IT Pro (Hong Kong) about this and the general consensus is that it shouldn’t have IPO’d when it did. IDC Retail head of Europe, Spencer Izard, told me that the firm simply can’t keep up with the demand for high quality deals on a daily basis, so it’s failing in turn to meet the insatiable growth demands of shareholders.
For Gartner’s Sandy Shen, it’s a vicious circle. Groupon is not coming up with consistently good deals, so customers are leaving. Merchants see these falling customer numbers and the fact that most are only after that one deal and aren’t returning, so they also lose interest.
For Miya Knights, global technology research director at Planet Retail, there’s simply too much competition for the firm these days, and not just from bricks and mortar stores, which have lowered their prices to match the web.
“Groupon was first to the flash deals party, but has certainly not been the last. The space it occupies has been filled with direct, global and local competitors that offer deals across a wide range of categories, like Wowcher in the UK. More niche, specialist deal sites, for hotels, holidays, and home furnishings etc. have also emerged to fill the space,” she told me by email.
“Groupon’s figures, however, show it still has a loyal customer base and that revenues are strong. It’s just that its business model is broken: it does not generate enough revenue from its daily deals, which is where the margin lies, and relies too heavily on selling goods at discount prices, where the margins are tiny.”
So is there any hope for the site? It’s now trying to rebrand as an online marketplace, but with the likes of Amazon and eBay also playing in that space, the future doesn’t look too rosy.

