The securities fraud complaint filed by the U.S. Securities and Exchange Commission against Tesla CEO Elon Musk contains an eye-opening view into the events leading up to the &funding secured& tweet heard round the internet.

And luckily, TechCrunch has read through the document and highlighted the most compelling details, including new insights from the SECinvestigation.

But first, the nuts and bolts:The SEC filed a complaint Thursday in federal district court alleging that Musklied when he tweeted on August 7 that he had &funding secured& for a private takeover of the company at $420 per share. Federal securities regulators reportedly served Tesla with a subpoena just a week after the tweet. Investigations can take years before any action is taken, if at all.

In this case, the investigation, which regulators say is continuing, progressed to a complaint within six weeks.

The SEC alleges that Musk violated anti-fraud provisions of the federal securities laws. The commission has asked the court to fine Musk and bar the billionaire entrepreneur from serving as an officer or director of a public company. Thata big deal, and one Musk will certainly fight.

In a statement sent to TechCrunch, Musk described fraud charges an &unjustified action& that has left him &deeply saddened and disappointed.&

Here are some of the key takeaways and nuggets pulled from the complaint, which includes details of the SECinvestigation:

The fundinterest in Tesla

Musk met with representatives of a sovereign investment fund (Saudi Arabiasovereign wealth fund) three or four times beginning in January 2017. There was never a formal agreement, but the fund did express a&verbal desire& to make a big investment inTesla and establish a production facility in the Middle East, according to the complaint.

After months without contact, Musk met withthe fundlead representative on July 31. This is when he learns the fund has acquired almost 5 percent of Teslacommon stock.

According to the complaint, the representative expresses interest in taking Tesla private and asks about establishing a production facility in the Middle East. Musk said he was open to the idea, but did not make a commitment.

The representative did tell Musk that as long as the terms were &reasonable,& the fund would be fine with them. However, the pair never discussed specific deal terms during the meeting or talked about what would or would not be &reasonable.&Nothing was exchanged in writing, and there was no discussion of confidentiality, according to the complaint.

Musk did not communicate with representatives of the fund again about a going-private transaction until August 10, three days after his August 7 statements, the complaint states.

The Saudi sovereign wealth fund agreed in September to invest $1 billion into electric vehicle startup Lucid Motors.

The tweet was not some whim

Some have speculated that MuskAugust 7 tweet was just a silly impulse, particularly because the proposed shared price was a reference to marijuana. But regulators show in the complaint that Musk was talking to the board about an offer to take Tesla private as early as August 2 when he sent to Teslaboard of directors, chief financial officer and general counsel an email with the subject, &Offer to Take Tesla Private at $420.&

The email laid out his reasonsfor wanting to take Tesla private, including that being public &[s]ubjects Tesla to constant defamatory attacks by the short-selling community, resulting in great harm to our valuable brand,& according to the complaint.

The $420 share price

According to the complaint, Muskcalculated the $420 price per share based on a 20 percent premium over that dayclosing share price because he thought 20 percent was a &standard premium& in going-private transactions.

This calculation resulted in a price of $419. Musk stated that he rounded the price up to $420 because he had recently learned about the numbersignificance in marijuana culture and thought his girlfriend &would find it funny, which admittedly is not a great reason to pick a price,& according to the complaint.

A 50-50 chance

MuskAugust 7 tweet indicated that funding had been secured. The complaint lays out a much different account.

Musk thought that there was &a lot of uncertainty& regarding a potential going-private transaction at the time of his August 2 email to Teslaboard, &but it was worth investigating,& according to the complaint.

He believed at the time that the likelihood of consummation of a transaction was about 50 percent, the complaint says.

Permission granted, request ignored

Musk had a call with the board on August 3, the day after he sent the email. He told the board he wanted tocontact existing shareholders to assess their interest in participating in a going-private transaction, the complaint said.

The board authorized him to contact certain investors and report back on those conversations.

Musk never spoke to any shareholders. He had a conversation with a private equity fund representative about the process, according to the complaint. But he didn&t contact anyadditional potential strategic investors to assess their interest.

He also did not provide the board with a specific proposal, contact existing shareholders to determine if they would remain invested in Tesla as a private company, retain any advisers or determine whether retail investors could remain invested in Tesla as a private company.

Four days after the call he sent the tweet.

An unprecedented transaction structure

During his conversation with a private equity fund partner, who had previous experience with such transactions, Musk said the number of Tesla shareholders needed to be below 300, according to the complaint.

But herethe problem. Tesla had more than 800institutional shareholders and many more individual shareholders at the time.

The private equity fund partner said the transaction structure that Musk was contemplating was &unprecedented& in his experience, according to the complaint.

Is it legit

MuskAugust 7 tweet triggered a maelstrom of calls, emails and texts from the board, executive staff, analysts and press. Confusion was the theme early on.

In one example, Teslahead of investor relations, Martin Viecha, sent a text to Muskchief of staff (Sam Teller) about 12 minutes after the initial tweet asking &Was this text legit&

Teller and Viecha would receive more communications from press and shareholders. One reporter emailed Musk asking &Are you just messing around& The reporter wrote, &Reaching out to see whatgoing on with your tweets about taking the company private Is this just a 420 joke gone awry&

Write comment (98 Comments)

Senator Mark Warner (D-VA) has issued a stern reprimand to Facebook over todayrevelation that 50 million users had their access token stolen by a hacker. &This is another sobering indicator that Congress needs to step up and take action to protect the privacy and security of social media users& Warner writes. As I&ve said before & the era of the Wild West in social media is over.&

In July, Warner published an expansive policy paper outlining where he believes regulation is necessary for social media companies. He proposes that companies holding large data sets be regulated as &information fiduciaries& with additional consequences for improper security. He suggests requirements for data portability and interoperability that would allow users to export their personal information and use it elsewhere if they were unsatisfied with their treatment by a social media giant. He also recommends applying similar rules in the US to EuropeGDPR including a requirement that breaches be disclosed within 72 hours of discovery. Notably, Facebook did disclose this hack within that window.

[Update: FTC Commisioner Rohit Chopra has now tweeted that &I want answers& regarding the Facebook hack, further strengthening the possibility that todayproblem will trigger more calls for regulation.] CEO Mark Zuckerberg wrote today that &While I&m glad we found this, fixed the vulnerability, and secured the accounts that may be at risk, the reality is we need to continue developing new tools to prevent this from happening in the first place.&

Facebook hack could hasten regulation as Sen. Warner says Congress must &step up&

Facebook &View As& tool has been disabled following the hack. It let users see how their profile looked to a certain other user

The breach saw sophisticated hackers combine three Facebook bugs in its video uploader, user profile, and &view as& privacy feature to generate and steal the access tokens that allow users to stay logged into Facebook between sessions. These could be potentially used to take over user accounts. Facebook says thereno evidence that hackers accessed users& private messages or posted on their behalf. However, CEO Mark Zuckerberg confirmed on a call with reporters that before Facebook fixed the issue last night, hackers did try to query the Facebook API for users& names, hometowns, genders, and possibly more.

Facebook has reset the access tokens of the 50 million users impacted plus another 40 million who&d had their accounts viewed through the &view as& tool this year. That means they&ll have to log back into Facebook but won&t need to change their password.

The bugs stem from code pushed back in July, but Facebook only discovered the issue Tuesday afternoon as the hackers tried to scale up the attack to steal more tokens. Facebook patched the issue last night and this morning announced it was investigating, though it currently doesn&t have enough information to determine the source of the attack. Italready notifed the FBI, as well as the Irish Data Protection office since the breach has GDPR implications.

On a call with reporters, CEO Mark Zuckerberg repeatedly called the problem &serious&. But beyond recounting the steps Facebook is taking to address this breach, he didn&t have a good answer for why users should still trust Facebook with their data.

Facebook says at least 50 million users affected by account takeover bug

Always quick to pounce on privacy issues, Warner has become one of the strongeest Democratic critics of the social network. Heseemingly inherited the position of tech watchdog from former-Senator Al Franken. Heweighed in on recent social media bias and election interference, Googleplan to launch censored search in China, White House cybersecurity plans and more. With technology becoming an ever more important and dangerous part of peoplelives, Warner seems to see an opportunity to both protect his constituents and advance his career by demonstrating his expertise and ferocity.

This hack could be by Warner as strong evidence that social media companies like Facebook are not voluntarily doing enough to protect uses& security and privacy. If regulation around security, portability, and interoperability is enacted, it could cost Facebook money for compliance, slow dow the pace of engineering innovation at the company, and make it more vulnerable to competitors.

Zuckerberg urges privacy carve outs to compete with China

Zuckerberg has countered that regulation could actually protect Facebook from disruption by making it tougher for new social networks to build up the data treasure trove it has. He also believes regulation could slow down US tech companies, thereby giving Chinese alternatives an advatange as they battle for international markets like India and Brazil.

Right now, ittough for users to easily switch from Facebook to another social network, which insulates Facebook from its PR problems becoming user growth problems. But if ditching Facebook for a competitor becomes simpler, it might force the company to treat its users better.

The Senator Mark Warnerfull statement can be found below:

STATEMENT OF U.S. SEN. MARK R. WARNER

~ OnFacebook hack~

WASHINGTON & U.S. Sen. Mark R. Warner (D-VA), Vice Chairman of the Senate Select Committee on Intelligence and co-chair of the Senate Cybersecurity Caucus, released the following statement on the announcement by Facebook that it discovered a security issue affecting almost 50 million accounts:

&The news that at least 50 million Facebook users had their accounts compromised is deeply concerning. A full investigation should be swiftly conducted and made public so that we can understand more about what happened.

&Todaydisclosure is a reminder about the dangers posed when a small number of companies like Facebook or the credit bureau Equifax are able to accumulate so much personal data about individual Americans without adequate security measures.

&This is another sobering indicator that Congress needs to step up and take action to protect the privacy and security of social media users. As I&ve said before & the era of the Wild West in social media is over.&

To kick start the debate around social media legislation, Sen. Warner in July releaseda white papercontaining a suite of potential policy proposals for the regulation of social media.

Write comment (96 Comments)

Remember phone reveals Once upon a time, companies were able to save a little for the event. These days, however, we nearly always know exactly what we&re getting ourselves into. Due to be announced next month, the second iteration of Razergaming-centric handset is no different.

Bits and pieces of the forthcoming phone have already surfaced, but todaylatest leaks give us the clearest picture thus far. From an aesthetic standpoint, not a lot has changed. From the front, the new Razer Phone 2 looks virtually identical to last yearmodel, retaining the boxy design.

The back of the handset has been tweaked a bit, with a shifted logo, now in a neon green, in keeping with the rest of Razerproducts. The company appears to have borrowed the Chroma lighting effects here, meaning that the logo should light up when in use. The rear-facing camera has shifted down a bit, as well.

Beyond this, we don&t know a ton about the phone — but have no fear, therestill time. The handset is set for an official launch on October 10, which leaves us with a week and a half left to leak.

Write comment (93 Comments)

Blok.Party, the company that built the upcoming PlayTable game console, announced today it raised $10 million in new funding. Italso unveiling a big content partnership, where Blok.Party will create its own version of the popular board game Settlers of Catan.

I first wrote about Blok.Party and PlayTable earlier this year, when co-founder and CEO Jimmy Chen first laid out his vision to use blockchain technology to build a console that can recognize real-world objects (like figurines and cards), creating a hybrid between tabletop and video gaming.

The idea may have sounded a little abstract at the time, but it got a lot clearer when Chen dropped by the TechCrunch New York office to play a couple rounds of Catan with me.

I&ll admit that I hadn&t played in a while, but it was clear from the start that PlayTable saved us some setup time — instead of putting all the pieces of the physical board together, you play on a digital representation of the board. Most of the pieces are digitized too, and we used and traded our cards using smartphones. But there is a physical &robber& piece, because Chen said this allows the robbermovement to remain &a very visceral experience … that a digital version can&t ever capture.&

It may not be too long before you get to try this out for yourself, at least if you&re among the 10,000 pre-orders Blok.Party has received so far. Chen said the company will start shipping its first devices this fall.

He added that Catan, like many of the other games built for PlayTable, will be priced at around $20.

&For us, itnot about trying to compete based on price,& Chen said. &We&re trying to compete based on experience.&

The new funding comes from crypto fund JRR Capital and other investors.Chen said the company will use the money to continue scaling the product, including further software development and building out the library of games.

At the same time, he emphasized that although Blok.Party is manufacturing the initial devices, his vision is to achieve real scale through partnerships with hardware manufacturers, who will build their own PlayTable consoles. Apparently, some of those discussions are already underway.

&Our strategy is to always have [our own] hardware program running to continually do research,& Chen said. &What I&ve discovered is that keeping a hardware program running is not that expensive. The expensive part is when you try to scale the program.&

Write comment (94 Comments)

Facebook has said at least 50 million user accounts may be at risk after hackers exploited a security vulnerability on the site.

The company said in a blog post Friday that it discovered the bug earlier in the week. The bug is part of the site&View As& feature that lets a user see their profile as someone else.Facebook has switched off the &View As& feature in the meantime while it investigates the bug further.

The bug allowed hackers to obtain account access tokens, which are used to keep users logged in when they enter their username and password. Stolen tokens can allow hackers to break into accounts.

Facebook said that it has reset access tokens of all users affected, as well as an additional 40 million accounts out of an abundance of caution. That means some 90 million users will have been logged out of their account — either on their phone or computer — in the past day.

Facebook also said that users will be notified of the security incident through a notification in their News Feed once they log back in.

&This is a breach of trust and we take this very seriously.&— FacebookGuy Rosen

&We have yet to determine whether these accounts were misused or any information accessed,& saidGuy Rosen, Facebookvice president of product management. &We also don&t know whobehind these attacks or where they&re based.&

Rosen said that Facebook spotted the attack because the hackers were automating their attack on a &large scale.&

Chief executive Mark Zuckerberg said on a call with reporters that the company doesn&t know if any accounts have been improperly accessed, though he said that the attackers tried to access account information by querying its developer APIs, which Facebook locked down last night.

&So far our initial investigation has not shown that these tokens were used to access any private messages or posts or to post anything to these accounts,& Zuckerberg told reporters. &But this, of course, may change as we learn more. The attackers used our APIs to access profile information fields like name, gender, hometown, etc. But wedo not yet know if any private information was accessedthat way,& he said.

The vulnerability, which was a result of three distinct bugs, was introduced in July 2017, when Facebook created a new video upload functionality on the service. OnSeptember 16, 2018, Facebook discovered unusual activity and launched an investigation that same week. OnTuesday, September 25, it uncovered the attack. It then notified law enforcement on Thursday, September 27, in the afternoon.

On Thursday evening, it fixed thevulnerability and began resetting the access tokens of people to protect the security of their accounts.

Facebook said the FBI is now investigating. Because users in Europe are also affected, the company said it has informed data protection authorities in Ireland — where the companyEuropean headquarters are located.

The Irish Data Protection Commission has asked Facebook to clarify the breach &urgently.& If Facebook is found to have breached European data protection rules — the newly implementedGeneral Data Protection Regulation (GDPR) — the company can face fines of up to four percent of its global revenue.

Federal Trade CommissionRohit Chopra also tweeted, suggesting the government agency may investigate.

&If we find more affected accounts, we will immediately reset their access tokens,& said Rosen. &This is a breach of trust and we take this very seriously.&

&I&m glad that we that we found this and that we were able to fix the vulnerability and secure accounts,& Zuckerberg told reporters. &But it definitely is an issue that this happened in the first place. And I think this underscores the attacks that our community and our service face, and the need to keep on investing heavily in security and being more proactive about protecting our community. And we&re certainly committed to doing that,& he added.

The attacks on Facebook have forced the company to rethink its overall development process. It has gone from a &move fast and break things& mentality to one of a slower and more cautious approach.

Facebook has been without a chief security officer since the departure of Alex Stamos in August. The social network retired the position after Stamos left. But the company said thatthis year itgrowing the number ofpeople working on safety and securityfrom10,000 to 20,000.

Sen. Mark Warner, vice-chairman of the Senate Intelligence Committee, warned in a statement of the &dangers& posed by companies that are &able to accumulate so much personal data about individual Americans without adequate security measures.&

The social network has 2.2 billion monthly active users as of its second quarter earnings.

Everything you need to know about Facebookdata breach affecting 50M users

Facebook hack could hasten regulation as Sen. Warner says Congress must &step up&

Write comment (97 Comments)

&Slack is down.& Ita headline we have had blaring at TechCrunch on numerous occasions (mostly because we actually get work done when not distracted by a constant waterfall of GIFs). But Slack is not alone — issues with uptime and reliability plague modern web services, from Alexa to WhatsApp to Apple Maps.

As any software engineer can attest, web application development is extraordinarily complicated. Databases, storage services and business logic all need to work together perfectly so that users can buy their goods or watch their films.

But what happens when one piece of that application breaks down Today, a small outage in one AWS availability zone could cascade and knock offline an entire service, as we have seen repeatedly. Todaydeveloper tools are decent at spotting bugs and other logic errors, but they don&t investigate applications systematically to ask how they can respond to various crises.

Thatwhere Gremlin comes in. The service, founded by CEO Kolton Andrus, who designed Netflixfailure injection service and worked with CTO Matthew Fornaciari while at Amazon, is designed to throw a monkey wrench into any application, simulating faults like storage errors, database congestion and sudden spikes in latency. Its tagline is &break things on purpose& (something of a rift of Facebook&move fast and break things&).

Resiliency is clearly on investors& minds, since the startup announced this morning at its Chaos Conf in SF that it has raised an $18 million Series B round led by Redpoint partner Tomasz Tunguz. Thata follow-up to a $7.5 million series A led by Index Ventures partner Mike Volpi, which was announced less than a year ago.

In addition to announcing the funding today, the company unveiled its &Application Level Fault Injection& system — a mouthful of a name, but a feature that will help DevOps engineers test systems at the application level, including most importantly serverless environments.

Andrus said in a note to TechCrunch that &This past year has been a whirlwind. We spent a lot of time educating everyone from engineers to CIOs about chaos engineering and building up the community.& He said the new funding will be used to further build out Gremlinengineering team.

As I wrote about in-depth a few months ago, Gremlin is pioneering a field of software development dubbed &chaos engineering.& Rather than using formal verification to test whether code is accurate and performant, chaos engineers throw deliberate and systematic errors at an application in an attempt to simulate various types of failure and find brittle parts of software programs.

That sounds easy on the surface, but extremely complicated in practice: You want to simulate an outage without actually creating an outage on a mission-critical system. Netflix wants to test whether losing a database will cause video to stop playing, without physically pulling the plug on a database and seeing if your movie is still on the TV.

Gremlinplatform provides something of a sandbox for engineers to slowly ramp up errors, and then more importantly, ramp down errors if a breakage is detected. So a DevOps engineer can add a few milliseconds of latency to a program and see how it responds, and then add a few more.

With the rise of serverless services like AWS Lambda, the complexity around applications gets even more challenging. Now, applications aren&t just on a single instance, but individual functions could be scattered across multiple instances and potentially multiple data centers. That can save developer time and reduce costs, but it also exponentially increases the risk of something going wrong and harming an applicationreliability.

Gremlinnew ALFI feature is designed to allow more fine-grain tuning of attacks, so that DevOps engineers can target just particular aspects of an application living in a serverless environment. Itinspired by Andrus& work at Netflix around Failure Injection Testing, which was a sort of successor to the companyearlier Chaos Monkey tools.

Chaos engineering service Gremlin raises $18M, launches new resiliency tools

GremlinALFI feature allows developers to simulate more fine-grained failures

Itthese sorts of features that partly intrigued Tunguz at Redpoint, who is well-known for his thoughts on SaaS. He said in a note to TechCrunch that &In the modern cloud era — where systems are distributed, containerized, and highly ephemeral — itbecome nearly impossible to have a complete understanding of system behavior without doing the kind of proactive testing Gremlin offers.&

Gremlinwork is to not just sell a service, but to reshape how developers think about building and testing applications. Perhaps someday all of our web services will be reliable — and then how will we get work done

Write comment (94 Comments)