ckbk pulls a ‘Spotify for recipes’ out of the beta oven – gpgmail


Cooking may be under sustained attack by a wave of on-demand food delivery startups, with names that can double as gluttonous calls to action (oh hey Just Eat!), but that hasn’t stopped London-based startup ckbk from pushing in the opposite direction — with a digital service that offers on-demand access to high quality recipes licensed from major publishers of best selling cookbooks.

Indeed, the ckbk platform serves up not just individual recipes but entire cookbooks for browsing in app form.

The ckbk platform, which launches out of beta today — after a Kickstarter campaign last year that raised just over $55k — is being touted by its creators as ‘Spotify for recipes’. Think ‘playlists’ of professionally programmed dishes to whip up in the kitchen.

At launch it offers access to a catalog of more than 350 cookbooks (80,000+ recipes) — a culinary library that’s slated to keep growing.

For $8.99/£8.99 per month the premium ckbk user gets to tuck in to unlimited access to this “curated collection of cookbooks” — with content selected using “recommendations from hundreds of chefs and food experts including Nigella Lawson and Yotam Ottolenghi”.

A freemium layer offers access gratis to three recipes per month.

Subscribers are essentially paying for someone else with (most likely) superior knowledge of cooking to sort the wheat from the chaff so you don’t have to do the legwork of figuring out what freebie Internet recipes are worth investing your time (and after it, teeth) in.

Not just any old recipes, editorially curated recipes is the ckbk promise.

Content partners at launch include “dozens” of major publishers — including Chronicle Books, Macmillan, Oxford University Press, Rodale, Simon & Schuster, Workman Publishing and Penguin Random House’s Rodale and Struik imprints.

Culinary content available via the platform is billed as spanning both contemporary authors like Molly Yeh and David Tanis, to award winning authorities and Michelin starred chefs, while also dipping into old  culinary classics, such as On Food & Cooking and the Oxford Companion to Food, and offering works penned by legendary French chef and restauranteur Escoffier.

Publishers participating in ckbk’s platform are being promised a new digital revenue stream (it’s not clear what the revenue share is) — sweetened with data in the form of “new insights into patterns of cookbook recipe usage” they can use to feed into future editorial output. So of course all ckbk users are having their foodie browsing extensively data-mined.

To push its ‘premium recipes’ proposition ckbk is trailing a bunch of forthcoming promotional partnerships with kitchenware brands, food-related ecommerce brands, food events, culinary schools and publishing channels — which it says will be launching in the next few months.

It also says recipes on the platform have been optimized for integration with connected kitchen appliances.

European company BSH (whose appliance brands include Bosch, Gaggenau, NEFF and Siemens) is named as the first strategic partner for ckbk. It will be offering premium membership of the service to UK buyers of its NEFF N90 connected oven.

A subset of ‘smart’ cookbook recipes on ckbk will automatically set the correct time and oven temperature via the N90’s Home Connect system — for anyone who can’t be bothered to twiddle the dials themselves.

ckbk adds that selected recipes will be further “optimized” to make the most of features and cooking modes of the smart oven. A tidbit which might make a seasoned chef raise an eyebrow and question whether that’s heading towards recipes for robots.

The licensing project has certainly been a slow burn. The company behind ckbk, 1000 Cookbooks, has been working on getting the concept to market since 2014, per Crunchbase.

It says it’s currently raising a $2M seed funding round — having previously raised a total of $750,000 in pre-seed funding via investors, the Techstars/BSH Future Home accelerator program, and its Kickstarter campaign.


10 minutes mail – Also known by names like : 10minemail, 10minutemail, 10mins email, mail 10 minutes, 10 minute e-mail, 10min mail, 10minute email or 10 minute temporary email. 10 minute email address is a disposable temporary email that self-destructed after a 10 minutes. https://tempemail.co/– is most advanced throwaway email service that helps you avoid spam and stay safe. Try tempemail and you can view content, post comments or download something

WebKit’s new anti-tracking policy puts privacy on a par with security – gpgmail


WebKit, the open source engine that underpins Internet browsers including Apple’s Safari browser, has announced a new tracking prevention policy that takes the strictest line yet on the background and cross-site tracking practices and technologies which are used to creep on Internet users as they go about their business online.

Trackers are technologies that are invisible to the average web user, yet which are designed to keep tabs on where they go and what they look at online — typically for ad targeting but web user profiling can have much broader implications than just creepy ads, potentially impacting the services people can access or the prices they see, and so on. Trackers can also be a conduit for hackers to inject actual malware, not just adtech.

This translates to stuff like tracking pixels; browser and device fingerprinting; and navigational tracking to name just a few of the myriad methods that have sprouted like weeds from an unregulated digital adtech industry that’s poured vast resource into ‘innovations’ intended to strip web users of their privacy.

WebKit’s new policy is essentially saying enough: Stop the creeping.

But — and here’s the shift — it’s also saying it’s going to treat attempts to circumvent its policy as akin to malicious hack attacks to be responded to in kind; i.e. with privacy patches and fresh technical measures to prevent tracking.

“WebKit will do its best to prevent all covert tracking, and all cross-site tracking (even when it’s not covert),” the organization writes (emphasis its), adding that these goals will apply to all types of tracking listed in the policy — as well as “tracking techniques currently unknown to us”.

“If we discover additional tracking techniques, we may expand this policy to include the new techniques and we may implement technical measures to prevent those techniques,” it adds.

“We will review WebKit patches in accordance with this policy. We will review new and existing web standards in light of this policy. And we will create new web technologies to re-enable specific non-harmful practices without reintroducing tracking capabilities.”

Spelling out its approach to circumvention, it states in no uncertain terms: “We treat circumvention of shipping anti-tracking measures with the same seriousness as exploitation of security vulnerabilities,” adding: “If a party attempts to circumvent our tracking prevention methods, we may add additional restrictions without prior notice. These restrictions may apply universally; to algorithmically classified targets; or to specific parties engaging in circumvention.”

It also says that if a certain tracking technique cannot be completely prevented without causing knock-on effects with webpage functions the user does intend to interact with, it will “limit the capability” of using the technique” — giving examples such as “limiting the time window for tracking” and “reducing the available bits of entropy” (i.e. limiting how many unique data points are available to be used to identify a user or their behavior).

If even that’s not possible “without undue user harm” it says it will “ask for the user’s informed consent to potential tracking”.

“We consider certain user actions, such as logging in to multiple first party websites or apps using the same account, to be implied consent to identifying the user as having the same identity in these multiple places. However, such logins should require a user action and be noticeable by the user, not be invisible or hidden,” it further warns.

WebKit credits Mozilla’s anti-tracking policy as inspiring and underpinning its new approach.

Commenting on the new policy, Dr Lukasz Olejnik, an independent cybersecurity advisor and research associate at the Center for Technology and Global Affairs Oxford University, says it marks a milestone in the evolution of how user privacy is treated in the browser — setting it on the same footing as security.

“Treating privacy protection circumventions on par with security exploitation is a first of its kind and unprecedented move,” he tells gpgmail. “This sends a clear warning to the potential abusers but also to the users… This is much more valuable than the still typical approach of ‘we treat the privacy of our users very seriously’ that some still think is enough when it comes to user expectation.”

Asked how he sees the policy impacting pervasive tracking, Olejnik does not predict an instant, overnight purge of unethical tracking of users of WebKit-based browsers but argues there will be less room for consent-less data-grabbers to manoeuvre.

“Some level of tracking, including with unethical technologies, will probably remain in use for the time being. But covert tracking is less and less tolerated,” he says. “It’s also interesting if any decisions will follow, such as for example the expansion of bug bounties to reported privacy vulnerabilities.”

“How this policy will be enforced in practice will be carefully observed,” he adds.

As you’d expect, he credits not just regulation but the role played by active privacy researchers in helping to draw attention and change attitudes towards privacy protection — and thus to drive change in the industry.

There’s certainly no doubt that privacy research is a vital ingredient for regulation to function in such a complex area — feeding complaints that trigger scrutiny that can in turn unlock enforcement and force a change of practice.

Although that’s also a process that takes time.

“The quality of cybersecurity and privacy technology policy, including its communication still leave much to desire, at least at most organisations. This will not change fast,” says says Olejnik. “Even if privacy is treated at the ‘C-level’, this then still tends to be about the purely risk of compliance. Fortunately, some important industry players with good understanding of both technology policy and the actual technology, even the emerging ones still under active research, treat it increasingly seriously.

“We owe it to the natural flow of the privacy research output, the talent inflows, and the slowly moving strategic shifts as well to a minor degree to the regulatory pressure and public heat. This process is naturally slow and we are far from the end.”

For its part, WebKit has been taking aim at trackers for several years now, adding features intended to reduce pervasive tracking — such as, back in 2017, Intelligent Tracking Prevention (ITP), which uses machine learning to squeeze cross-site tracking by putting more limits on cookies and other website data.

Apple immediately applied ITP to its desktop Safari browser — drawing predictable fast-fire from the Internet Advertising Bureau whose membership is comprised of every type of tracker deploying entity on the Internet.

But it’s the creepy trackers that are looking increasingly out of step with public opinion. And, indeed, with the direction of travel of the industry.

In Europe, regulation can be credited with actively steering developments too — following last year’s application of a major update to the region’s comprehensive privacy framework (which finally brought the threat of enforcement that actually bites). The General Data Protection Regulation (GDPR) has also increased transparency around security breaches and data practices. And, as always, sunlight disinfects.

Although there remains the issue of abuse of consent for EU regulators to tackle — with research suggesting many regional cookie consent pop-ups currently offer users no meaningful privacy choices despite GDPR requiring consent to be specific, informed and freely given.

It also remains to be seen how the adtech industry will respond to background tracking being squeezed at the browser level. Continued aggressive lobbying to try to water down privacy protections seems inevitable — if ultimately futile. And perhaps, in Europe in the short term, there will be attempts by the adtech industry to funnel more tracking via cookie ‘consent’ notices that nudge or force users to accept.

As the security space underlines, humans are always the weakest link. So privacy-hostile social engineering might be the easiest way for adtech interests to keep overriding user agency and grabbing their data anyway. Stopping that will likely need regulators to step in and intervene.

Another question thrown up by WebKit’s new policy is which way Chromium will jump, aka the browser engine that underpins Google’s hugely popular Chrome browser.

Of course Google is an ad giant, and parent company Alphabet still makes the vast majority of its revenue from digital advertising — so it maintains a massive interest in tracking Internet users to serve targeted ads.

Yet Chromium developers did pay early attention to the problem of unethical tracking. Here, for example, are two discussing potential future work to combat tracking techniques designed to override privacy settings in a blog post from nearly five years ago.

There have also been much more recent signs Google paying attention to Chrome users’ privacy, such as changes to how it handles cookies which it announced earlier this year.

But with WebKit now raising the stakes — by treating privacy as seriously as security — that puts pressure on Google to respond in kind. Or risk being seen as using its grip on browser marketshare to foot-drag on baked in privacy standards, rather than proactively working to prevent Internet users from being creeped on.




10 minutes mail – Also known by names like : 10minemail, 10minutemail, 10mins email, mail 10 minutes, 10 minute e-mail, 10min mail, 10minute email or 10 minute temporary email. 10 minute email address is a disposable temporary email that self-destructed after a 10 minutes. https://tempemail.co/– is most advanced throwaway email service that helps you avoid spam and stay safe. Try tempemail and you can view content, post comments or download something