≡ Menu

This is the first time I’ve seen this design in a phish attempt. Instead of trying to get you to “verify” your “account” or various other notifications that try to get you to click on the link so the spammers can fake you into revealing your credit card and other sensitive information, this spam acts as if you’ve already purchased something. This is clever. Because most of us share credit cards with spouses, children, etc., it is reasonable to see unfamiliar businesses on our statements. Instead of trying to contact our family member to inquire about the charge, it seems easier just to click on the link, or download the attached “receipt.”

Obviously, don’t download any strange attachments!

Here are 3 new habits to adopt to keep up with this kind of clever phishing:

1. Realize that generic receipts like this one, without your credit card number, without the time and date of the transaction, no amount of transaction, no branding, etc., are not real email receipts. Real email receipts come within seconds of a purchase and have a LOT more detail that this piece of crap.

2. SEARCH!!! If you can’t figure out, just by looking at an email, that it is a phishing attempt but you suspect it, just run the “company” name into a Google or other search engine. I found a gabillion search results on “Bobijou” that all indicated that this was a spam email, along with dire warnings against downloading the attachment. Always search. People like me post stuff like this all the time.

3. Get multiple email accounts. One thing that is a dead giveaway to me is that these phishing emails come to my purplecar.net account. I NEVER, EVER use that account for my purchases. I have a few separate email accounts, including one that I keep quite private to use almost exclusively for buying stuff online. I never publish it so the spam bots can’t find it. The purplecar.net one is published on this site and it is a spam magnet. Yahoo, Google, Hotmail, all offer outstanding email services for free. Get a few of these and use different passwords for each. Use one for signing up for coupons, newsletters, etc., one for email from friends, and another for shopping (preferably you have a paid-for account on Comcast or Verizon or somewhere that you can use for shopping).

 

Here’s the phishing attempt, full text, no attachment:

 

Thank you for ordering from Bobijou Inc.

This message is to inform you that your order has been received and is currently being processed.

Your order reference is 592800.
You will need this in all correspondence.

This receipt is NOT proof of purchase.
We will send a printed invoice by mail to your billing address.

You have chosen to pay by credit card.
Your card will be charged for the amount of 122.00 USD and „Bobijou Inc.‰ will appear next to the charge on your statement.

You will receive a separate email confirming your order has been despatched.

Your purchase and delivery information appears below in attached file.

Thanks again for shopping at Bobijou Inc.

2 comments

Why FourSquare Should Buy Some Pigeons

pigeons and people by ecormany on Flickr

Pigeons, Checking In

My Pigeon

The late August day in Pittsburgh was sunny and warm. I walked across the University campus to the psych building, where I settled into a seat in the big lecture hall. “Advanced Human Behavior” was a seminar course for the Bachelor of Science in Psychology I was earning. After a few minutes, a tall but elderly gentleman with a shock of frizzy snow white hair took to the podium. He carted a large, worn tome, obviously an academic book. “This is B.F. Skinner’s book.” The book made a large thud on the wood. The elderly professor hurriedly flipped through the pages. He then picked up the book and displayed a page with a simple graph on it, with an X axis, a Y axis, and a single, crooked line. “This is my pigeon,” he said proudly.

It was altogether adorable and fascinating. My professor had been a graduate student under famed (and famously a bit strange) Behaviorist B.F. Skinner, and he was going to spend the rest of the semester not only telling us amusing anecdotes about Skinner, but how the system of stimulus->reward and all its variants can induce the most predictable and powerful responses in all organisms, including humans. (My most-remembered anecdote was how he watched Skinner try and fail at sleeping 15 minutes of every hour around the clock, instead of a solid 7-8 hours like normal. This is before the discovery and understanding of how the absence of rapid eye movement sleep induces psychosis after a 48 hours).

Behaviorism, of course, doesn’t cover all the bases. As a theory, it falls short in many areas. The discipline of Cognition was combined with Behaviorism to make a more complete theory. But this doesn’t mean that Behaviorism’s stimulus-response theory is worthless; it isn’t. In fact, simple Behaviorist theory is alive and well in online application design. Unfortunately, many designers lack the Psych background or behavior insights that lead to successful online games. Foursquare is one of them. Foursquare should really look into buying some pigeons.

That first day in lecture, my distinguished Professor Emeritus was kind enough to explain how he trained his pigeon to hit a bar to deliver an edible treat. He also went on to do a bunch of other experiments with pigeons, all under the guidance of BF Skinner. My classmates and I spent the semester learning all the proven combinations of reward schedules, variable stimuli, operant conditioning, that are designed into systems and spaces that make people behave the way they do. We studied a lot of pigeons. Pigeons are particularly intelligence-free animals. They are easily distracted and easily trained. They are almost pure stimulus-response organisms. Because of this, they can give us insight into what stimuli work and what don’t, because we can safely assume that the pigeon isn’t influenced by any cognition whatsoever.

If the Foursquare (4sq) people got a bunch of pigeons in the office and trained them to hit a button for food, then perhaps they’d understand why their app is failing. Sometimes humans aren’t influenced by any cognition whatsoever either. We know certain things about our environments, about rewards, about which pursuits are worthy of our effort. We have this enormous base of knowledge in our subconscious, and we tap it all the time as we make split-second decisions. 4sq is making us tap all the “Don’t do this” advice in our knowledge base.

Let me explain.

Yummy Food Button

Let’s take a look at Twitter. New users tend to drop Twitter quickly. They don’t receive enough reward from it: They don’t get any replies; They don’t have enough friends; They don’t have any conversations or join any chats; The coveted “retweet” is totally out of their grasp. These Twitter Quitters aren’t conscious why they quit using the application, they just quit. Their knowledge base has told them the Twitter reward system doesn’t deliver.

Whenever a reward system doesn’t deliver, people quit. When pigeons don’t get any more food from the button, they quit pecking at it. This is the logical and natural consequence that is seen over and over again in countless lab and real-life experiments.

The strongest reward systems, where the reward is delivered on an intermittent and somewhat unpredictable schedule, are the most “addictive.” Twitter, once you set up your account and start joining in, is one of the best intermittent reward systems applications I’ve seen in my 20+ years online. The beauty of it is that the intermittent rewards aren’t programmed or delivered by the Twitter code; they are delivered by other users. Twitter provides the platform and doesn’t need to do much else. Facebook works along the same lines; other users deliver the comments, the links, the Likes. These little human interactions aren’t simple chatter; they speak to our very survival as human animals. The more people we “have on our side” in life, the more secure we feel.

When we walk about our neighborhoods, go to work, live our physical lives, we take every instance of eye contact, idle chit-chat, handshake, or smile as a cue that we are connected to the community, that we are safe, that we belong. We grow up knowing how to read the validation in these human social messages. Online it’s not so clear cut. We’re learning that these Likes, comments, retweets, etc, are the messages we need in order to judge our place in the virtual community. If we don’t get enough of these positive messages, it feels the same as when we smile at the local librarian and she acts as if we aren’t standing there in front of her with a heavy stack of books in our hands. Certainly we’d stop going to the library if we got type of treatment on a regular basis.

Go Team Positive Reinforcement on a Variable Schedule @tomfoodlery

A Twitter reply to one of my application-design rants.

So: intermittent rewards on a variable schedule is the best way to go if you are designing an application and you want users. Twitter should do something to address the lack of rewards for new users; they’d

see their success percentage go up and their Twitter Quitter numbers go down if they delivered some replies, retweets, chat suggestions, whatever, to new users. Facebook already addresses the new user quitting problem by immediately delivering “friends” by offering to sort through a new user’s address book to see whom they may already know and can be immediately connected to on the application. Boom. Intermittent reward schedule in place and running.

This brings me to Foursquare and why I think they need some major design changes in order to survive.

Pigeon Territory

Location-based applications are all the rage. Even Facebook, Twitter and other not-related-to-location applications are jumping on the “Come Find Me” bandwagon. Foursquare, Gowalla and other dedicated location-based apps are facing stiff competition from Facebook. Why start up Foursquare or Gowalla on your phone when you can just log in to Facebook and broadcast to all your lovely stalkers that you’ve set up camp in the local Baskin-Robbins?

4sq has a pseudo-intermittent reward system called Mayorships. If you check in to a venue a certain number of times, you become Mayor. This sounds like it would work and people would get to a permanently engaged state, but it turns out that it doesn’t. Here’s the skinny:

*Most of the time, “Mayor” is just a bragging-rights opportunity. Bragging rights are only worth the amount of friends you have who value Mayorships. If you don’t have a lot of friends in 4sq that also frequent your same favorite venues, the bragging rights are meaningless. Because 4sq is a time-dependent, physical-location-broadcast app, people will not invite a lot of their friends to connect with them in the app. Their circle will be made up of friends they’d like to see and/or compete with. Not a lot of friends=meaningless Mayorships.

*4sq gives you too much clue as to when you will earn the Mayorship. “You are now 1 day away from being Mayor!” is the worst thing an intermittent reward system can do. “You will probably be Mayor soon!” would be a much more powerful approach.

*”Mayor” has been gamed and is no longer relevant. Adding to the meaninglessness of the rewards in the 4sq system, the Mayorships have been taken over by users who are collectors. Many businesses have been reporting that they have never seen their Mayor and suspect that she/he just checks in when they pass the venue on their commute. Collectors find reward in these Mayorships, but the general community becomes disenfranchised because the collectors have hoarded the rewards for very different reasons than their own.

*No efforts are made by businesses to welcome their Mayor. I’ve held the title of Mayor of many venues, but not once did I see a sign at the venue that said, “Are you our Mayor? Say Hi!” I’d have to see some sort of anonymous invitation like that before I’d volunteer my Mayoral status to some unsuspecting barista. It’s too embarrassing when said barista delivers his most-alarmed “Oh, no, another crazy person!” look. Venues aren’t adopting the community aspect of 4sq.

*Too few venues offer Mayor discounts or coupons. 4sq has addressed this by having venues offer discounts to anyone who checks into the venue, but there still aren’t a lot of valuable offers or coupons in the app. Nothing but Mayorships are delivered on a somewhat intermittent system; special discounts and coupons, above and beyond the check-in ones, should be delivered to users on an intermittent schedule.

4sq’s rewards have been rendered meaningless by gamers (collectors), the transparency in the reward schedule, and lack of venue cultural (welcome your Mayor) and financial (discounts) participation. 4sq will fail if they don’t address this situation.

 

Who Are The Pigeons In Your Neighbohood?

Have you been using Foursquare? What are the differences you find in Twitter and Foursquare, Facebook and Foursquare? Have you used Gowalla or other location-based apps and find them more satisfactory? Let me know in the comments.

-Christine Cavalier

8 comments

Video Book Review: Tell to Win by Peter Guber


Buy Tell to Win on IndieBound

Nick Morgan Books:

Buy Give Your Speech, Change the World on indiebound


Buy Trust Me on indiebound

0 comments

Slang: All about all | The Economist

Slang: All about all | The Economist.

Click over to see we-all’s conversation about all and all.

0 comments

If I Ran Facebook: Ideas for Zuck

Dear Mr. Zuckerberg,

Hi. You don’t know me, but you can find me at facebook.com/christine.cavalier. Click on that link and it will take you to my The Facebook.com page. You will need Internet access and a web browser or a dedicated mobile application to access my page.

So, I’ve been wandering around your site for the past few years, and I’ve been hanging out on the Internet and with adult humans for the past 20 years, and I have a few ideas for you.

I’m not going to bug you about privacy and all that, because, you know, we don’t want to speak ill of the dead. Other people have beat you over the head about it already. I think you should definitely think about an opt out button for all the data collection in order to gain people’s trust, but whatever. That’s up to you.

But if I were you, I’d start thinking about human behavior a bit more. There’s this stage of mental growth in Developmental Psychology Theory called “Object Permanence.” Basically it’s the moment when babies realize that things and people don’t just disappear into the ether if they can’t see them. So mommy can go around the corner and baby doesn’t cry his eyes out as if aliens had abducted her. Baby knows his mommy will be back.

Adults have a similar way of working with their environs. We get used to things existing around us. When one of those things breaks, we replace it with a similar device. No-one would expect a family to live without a TV when their old TV dies. We expect that family to replace the TV.

As a Purveyor of Fine Internet Goods, you can’t sell the same kind of “object permanence.” A computer may be a staple in a household, but I haven’t seen any evidence nor human behavior that suggests that any one website has that level of assimilation. So, The Facebook needs to become an object.

If I were you, Mr. Zuck, I’d start developing a stand-alone, dedicated The Facebook Pad. This “Facebooker” (or whatever cutesy name your sister comes up with for it) will be a wall-mounted iPad-like dedicated hardware and software object. It will use wifi and will operate similarly to the FB-dedicated mobile apps. The price point must be way, WAY, WAAAAY less than an iPad. If you can swing it, it should have a camera for chat.

More ideas: You will have to implement some sort of Google-Calendar-like app into Fb so families can have one electronic wall-mounted calendar space. You should buy Foursquare and integrate it with this calendar, so much like Mrs. Weasley’s interesting clock, moms will be able to tell where their kids are located and compare that location to where they SHOULD be located according to the calendar.

Since this “Facebooker” hardware/software app will probably be hung in the kitchen, you should buy a live-chat video system like Skype. I’d love it if I could hire a chef to give me a cooking class via the Facebooker. They could take me through the meal step by step on video chat. This whole remote education possibility is something you should think about also. If you have a Facebooker, you can distribute all sorts of e-learning products. Think about buying up Strayer or some other e-learning “university.”

You should buy Venmo and all it’s people so you can have a decent peer-to-peer payment system. Then Zynga can side-step international gambling laws and write games where friends bet each other, about whatever friends bet each other on. I’d keep the fees down, so I can bet my friend $5 that he can’t stay off Twitter for 10 minutes numerous times and not feel cheated by fees.

Become best friends with Bill Gates if you are not already. I don’t know him personally but if I did, I’d introduce you. If you want The Facebook to become a staple in society like Microsoft, you will need to know how to acquire bunches and bunches of competition while circumventing anti-trust laws. Bill didn’t avoid the law entirely but he won in the end. Bill also knew how to get into major markets like business. But Bill had permanent, real objects like computers (from partnered companies) with his software on it to sell and was not only a Purveyor of Fine Internet Goods, like you are. Businesses didn’t ban the use of Bill’s products, like they do yours. Which leads me to my next idea:

Make a dedicated Facebook For Business. Install Facebookers in conference rooms, in the walls of secretaries’ cubicles, etc. Businesses right now ban social networking sites because of fear of lost productivity. Instead of trying to fight this image, instead of forcing business integration into the established Fb platform, open up another container entirely and gear it toward business use. I’d be shocked if you aren’t developing this already. Bill Gates got to the business market and held on tight. Microsoft is not going anywhere. Why? Because people are used to Excel. They expect it to be there and working on their computers that they are used to when they get to their desks. But more importantly, Bill got to the business market first, and he bundled up the software with the hardware it came on. You need to do this.

Human brains are wired a certain way. We depend on physical things. Facebook is not physical enough at this point to achieve the level of societal integration like Microsoft or Apple has achieved. And it won’t, ever, unless there are dedicated Facebook machines in homes and workplaces. It’s just how human brains work. The iPad is too “complicated” (has way too many uses to just dedicate it to Fb) and the price point is too high. Also, the iPad is designed to move around. The Facebooker should be designed to mount on the wall and able to be dismounted easily if necessary.

Once people get used to the physical presence of Facebook in their daily lives, in a real, not virtual way, then it will have truly become a permanent part of our every day lives.

Good luck, Mr. Zuck! I look forward to hearing from you. Which I probably won’t, ever, but you know, if you want me to tell you about how humans adopt tech and deal with change, shoot me an email. In Facebook.

-Christine Cavalier

8 comments