Technology

The World Of Ethical Hackers And Bug Bounties

The fact that big tech companies are willing to pay big bucks in ‘bug bounties’ is one of the main reasons why becoming an ethical hacker / ethical security tester is increasingly attractive to many people with a variety of technical skills.

What Is An Ethical Hacker?

An ethical hacker / white hat hacker/ ethical security tester is someone who is employed by an organisation and given permission by that organisation to penetrate their computer system, network or computing resource in order to find (and fix) security vulnerabilities before real hackers have the opportunity use those vulnerabilities as a way in.

Certified

In the US, for example, a person can obtain a Certified Ethical Hacker (CEH) qualification by using the same knowledge and tools as a malicious hacker, but in a lawful and legitimate manner to assess the security posture of a system.  CEH exams test a candidate’s skills in applying techniques and using penetration (‘pen’) testing tools to compromise various simulated systems within a virtual environment.

Who?

Ethical hackers can find work, for example, with organisations that run bug bounty programmes on behalf of companies e.g. Hacker One, Bug Crowd, Synack, or they can choose to work freelance.

What Are Bug Bounties?

Bug bounties are monetary rewards offered to those who have identified errors or vulnerabilities in a computer program or system. Companies like HackerOne, for example, offer guidance as to the amounts to set as bug bounties e.g. anywhere from $150 to $1000 for low severity vulnerabilities, and anywhere from $2000 to $10,000 for critical severity vulnerabilities.

Examples of bug bounties include:

  • The ‘Hack The Pentagon’ three-year initiative run by HackerOne which has so far (since 2016) paid $75,000 to those who have found software vulnerabilities in the Defence Department’s public facing websites.
  • Google’s ongoing VRB program which offers varying rewards ranging from $100 to $31,337 depending on the type of vulnerabilities found.
  • Facebook’s Whitehat program, running since 2011, and offering a minimum reward of $500 with over $1 million paid out so far. The largest single reward is reported to be $20,000.

Motivation

Money is often not the only motivation for those involved in ethical hacking.  Many are interested in the challenge of solving the problems, getting into the industry, and getting recognition from their peers.

Training

The UK has a tech skills shortage, but some schemes do exist to help the next generation of cyber-security experts gain their knowledge and skills.  One example is the UK’s Cyber Discovery scheme which had more than 25,000 school children take part in its first year.  The scheme turns finding security loopholes into engaging games while getting children familiar with the tools that many cyber-pros use.  Top performers can then attend residential courses to help them hone their skills further.

What Does This Mean For Your Business?

Ethical hackers play an important penetration testing role in ensuring that systems and networks are as secure as possible against the known methods employed by real hackers. It is not uncommon, particularly for large companies that are popular hacking targets, to offer ongoing bug bounty programs as a way to keep testing for vulnerabilities and the rewards paid to the ethical hackers are well worth it when you consider the damage that is done to companies and their customers when a breach takes place.

Running government programs such as Cyber Discovery could, therefore, be an important way to encourage, spot, and help develop a home-grown army of cyber-security professionals which is a win/win for companies wanting to improve their security, individuals looking for careers in the cyber-security and tech industries, and filling a skills gap in the UK.

Google AR Glasses Enterprise Edition For Workers

Six years on from the launch of the first Google glasses, Google has announced the introduction of Google Glass 2 Enterprise Edition, glasses incorporating a wraparound camera and AR and designed to help workers by providing instant hands-free access to key information.

Improved

Following on from the original introduction of Google’s ‘Glass’, followed by the last Enterprise Edition back in 2017 which suffered from poor take-up due to an apparent lack of applications, Glass 2 Enterprise Edition is an upgraded version with a clearer target market, and a marketplace more educated to its benefits.

Who?

Google’s shorthand definition of its target market for Google 2 is those working in manufacturing, field service and healthcare, primarily because it has development experience, success stories, and easy to transmit benefits in these areas.  For example, Google has worked with several partners in the marketplace to develop Glass 2 and to help hone the glasses and give them maximum value in Enterprise settings in the target markets and beyond.  For example, Google has worked with partners including AGCO, Deutsche Post DHL Group, Sutter Health, and H.B. Fuller.

What and How?

Glass 2 is essentially a hands-free, wearable device for “smarter and faster” hands-on work that provides the information that an employee needs in the periphery of their line of sight.  This means that workers, all of whom have limited time and resources, only one pair of hands, and need to be in one particular place to complete their work can get immediate, safe access to expert advice around the world.

In this way, Google Glass can:

  • Help improve efficiency and client relationships e.g. health care professionals don’t have to spend as much time in front of a computer screen and can spend more time in front of their patients. For example, the technology reportedly saves (on average) two hours of doctors’ time per day.
  • Help reduce processing and training time e.g. in manufacturing and field servicing.  For example, DHL is reported to have seen a 15% jump in operational efficiency in item picking because employees can use Google Glass (2) to receive real-time item picking instructions while on the warehouse floor.

Upgrades

The upgrades in Glass 2 compared to the last Enterprise Edition include:

  • A more powerful multicore CPU (central processing unit) and a new artificial intelligence engine to improve performance and support for vision.
  • Glass-compatible safety frames to help in different types of demanding work environments.
  • Improved camera performance and quality.
  • The inclusion of an SB-C port that supports faster charging and increased overall battery life.
  • The fact that it’s built on Android, so it’s easier to deploy, develop and improve.

Price

The price tag for Glass 2 is reported to be $999.

Criticism

Google’s Glass products have suffered criticism in the past over concerns about privacy, functionality and safety e.g. possibly reducing peripheral vision while driving.

What Does This Mean For Your Business?

Wearables and AR are both finding many value-adding real-world applications in multiple industries, and with Google’s Glass 2 being a combination of the two it has the huge potential that it always had, but this time with some technical improvements, a clearer marketing focus, and some real business world success stories to help back it up and provide the social proof and ROI information that businesses may be looking for.  The high price tag could, therefore, be offset by the potential efficiency savings, and added employee and customer benefits that could result from enterprise adoption of Glass 2.

Microbe Grown Headphones Offer Hope In Fight Against Plastic Waste

Finnish design house Aivan has shown how its ‘Korvaa’ headphones can be made from natural, microbe-grown, biodegradable materials, thereby offering hope in reducing the amount of plastic waste that goes to landfill or litters the natural world.

Natural Prototype

Although the headphones don’t actually work, the concept that has been created shows how a mixture of fungus, bioplastics, and other natural materials could provide an eco-friendly and equally as functional replacement for the kinds of non-biodegradable toxic plastics and materials that in a throwaway society would end up polluting the environment long into the future.

Design house Avia worked with scientists from VTT Technical Research Centre of Finland and Aalto University, to show how a three-dimensional object that’s familiar to consumers and contains a variety of materials could be made from natural and biodegradable materials.

Made of What?

Aivan’s concept for headphones shows how the main structure for the crown and cup shell can be made from a 3D-printed bioplastic that is a by-product of yeast processing lactic acid.

The padded earpieces can be made from the ‘hydrophobi’ protein which acts like foam because it has bubbles produced by a fungus and reinforced with plant cellulose. The padding can be covered with a fungus-derived mycelium that provides an alternative leathery and flexible material.  A mesh, made from synthetic spider silk can then be placed over the top of the speakers in the headphones

Synthetic Biology

The Korvaa prototype headphones, which took 6 months to develop and used materials which had to be grown rather than simply made in a chemical process are an example of synthetic biology/synbio which is a technology and discipline that fuses engineering with biology to fabricate materials, produce energy and treat illness.

On Display

The Korvaa team’s headphones will be displayed at Fiskars Village Art & Design Biennale 2019 (19 May to 19 September), and at Helsinki Design Week 2019 from 5-15 September 2019.

Others

There are companies already marketing eco-friendlier and more sustainable tech and music hardware products such as House of Marley speakers made from natural materials (alongside recycled metals and plastic), as well as ‘LSTN’ and ‘Thinksound’, both of which use wood in their headphones.

What Does This Mean For Your Business?

Even though the Korvaa headphones don’t work, they do show how microbially grown materials can have a real-life, value-adding application in terms of providing the same functionality as plastic counterparts, but without the long-term environmental risk.  Also, with more research and development, these types of new materials with improved properties could replace plastics in the future, thereby helping to tackle a major environmental issue.  This may of course take time, and there are likely to be cost and other implications for producing goods of this kind.  Nevertheless, it is likely that today’s consumer will find biodegradable goods of this kind an attractive option if they provide equivalent benefits and performance to the existing options, at a price that isn’t prohibitive.

Trust Challenge For Online Sharing Services

The Global Trust Survey from service provider Jumio has revealed that a quarter of adults feel unsafe using online sharing services.

What Are Online Sharing Services?

Online sharing services refers to companies like Uber and Airbnb where multiple users can use technology to book and consume a shared offering (car and room sharing), and where those offering the service can increase the utilisation of an asset – both parties get value from the exchange. The so-called “sharing economy” also includes services such as crowdfunding, personal services, and video and audio streaming.

The Sharing Economy

The sharing economy is expected to grow to a massive $335 billion by 2020. For example, in just 11 years, Airbnb has grown from nothing to becoming a $30bn firm listing more than six million rooms, flats and houses in more than 81,000 cities across the globe. Figures show that, on average, two million people use an Airbnb property each night.

Trust Challenge Revealed

Jumio’s Global Trust Survey showed that even though online sharing services are growing, and have been with us for some time now, in the 30 days prior to the survey taking place, over 80% of UK adults said that they hadn’t used an online sharing service, and 25% of UK adults said that they felt “somewhat unsafe” or “not at all safe” when using online sharing services.

A key element in making shared services successful is trust, and recent global from PwC confirmed this where 89% of consumers agreed that the sharing economy marketplace is based on trust between providers and users.

Identity Verification Vital

One area uncovered by the Global Trust and Safety Survey which appears to be a challenge for shared services is proving and verifying identity.  For example, the survey found that 60% of users believe it is either ‘somewhat important’ or ‘very important’ for new users to undergo an identity check to prove that they are who they claim to be.

This is the reason why companies such as Lyft are rolling out continuous background checks and enhanced identity verification, and why Uber is updating its app to give an alert to riders to check the license plate, make, and model of the vehicle, and to confirm the name and picture of the driver.

What Does This Mean For Your Business?

Trust is something that takes a long time for a business to build, and it is a vital element in the success of shared services such as those where considerable risk (financial and, critically, personal risk) is involved. Trust is also something that can be very easily lost, sometimes in an instant or through one high profile incident involving that service e.g. the recent murder in the US of a student by a man posing as an Uber driver.

The results of the Global Trust Survey help to remind businesses that offer shared services that consumers need and want a layer of safety to help them feel comfortable in trying and using those services.  Companies can, therefore, help create an ecosystem of trust through the process of identity verification.

Low Launch Share Price For Uber

Uber made its trading debut at the New York Stock Exchange (NYSE) last week, but the opening share price was much lower than had been expected at only $45 per share.

$45 Per Share

Ride-hailing (and now scooter and bike hire) company Uber had raised $28.5 billion as a private company from 166 different backers and was last valued at a still very impressive $75 billion. Even though banks and analysts had hinted at a projected figure of $120 billion that Uber looked set to raise in its public share offering, the actual figure turned out to be considerably less – a final valuation of $82.4 billion, selling 180 million shares at $45/share.

Nevertheless, this figure still marks Uber, the dominant player in the market for on-demand transportation, as one of the most valuable tech firms.

Vast

Uber is reported as having 93 million active platform consumers (that’s up from 70 million only a year ago), making 17 million trips per day across 700 cities on six continents.

Co-Founder Not On The Balcony at Stock Exchange

At the event, where the NYSE bell was rung while key members of Uber stood on the balcony, the co-founder of Uber did not join the public display (although he did attend the event).  Travis Kalanick had to step down from Uber (even though the billionaire still sits on the board with an 8.6% stake) over controversies about business practices.  This followed a four-month investigation, with 20 sackings, culminating in Kalanick stepping down.

Competitors

Even though Uber is the dominant company in its field it is now not without competitors.  For example, Lyft, Gett, Heetch, MyTaxi, and Bolt are all now gaining in popularity.  In fact, the biggest competitor Lyft, which has a similar business model to Uber, is currently trading at $55 which is below its debut of $78.29 on March 29.

Woes

Even though the event at NYSE was supposed to be a triumphant and positive one, some of Uber’s high-profile woes surfaced outside in the form of protests about the alleged treatment of drivers and the impact on cities by Uber. In recent times, Uber has been the subject of driver protests, lawsuits, questions about business practices, and the need to pay attention to regulatory pressures.

What Does This Mean For Your Business?

Uber’s rise to this moment appears to have been meteoric and huge, although investment commentators have noted that going on the pure metric of profit and loss, Uber has been posting losses e.g. a loss of some $1 billion in the last quarter on revenues of $3 billion-$3.1 billion.  Uber has faced a lot of controversies, and now has some strong competition, and all of these factors have perhaps been reflected in the lower than expected value per share.

Some market analysts are still concerned about how Uber can turn things around and how patient investors are likely to be although leadership under the current CEO Dara Khosrowshahi, looks promising.

Serious Security Flaws Discovered In Popular GPS Tracker

Researchers at UK cyber-security company, Fidus Information Security, say that they have found security flaws in a popular Chinese-manufactured white-label location tracker that could be serious enough to warrant a recall.

Which Tracker?

The GPS tracker which is used as a panic alarm for elderly patients, to monitor children, and to track vehicles is white label manufactured but rebranded and sold by several different companies which reportedly include Pebbell (by HoIP Telecom), OwnFone Footprint and SureSafeGo. The tracker uses a SIM card to connect to the 2G/GPRS network.  According to Fidus at least 10,000+ of these trackers are currently used in the UK

What’s The Problem?

According to the researchers, simply sending the device a text message with a keyword can trick the tracker into revealing its real-time location. Also, other commands tried by the researchers can allow anyone to call the device and remotely listen in to its in-built microphone without the user knowing, and even remotely stop the signal from the tracker, thereby making the device effectively useless.  On its blog, Fidus lists several other things that its researchers were able to do to the device including change or completely remove all emergency contacts, disable the motion alarm, disable fall detection and remove any device PIN which had been set.

All these scenarios could pose significant risks to the (mainly vulnerable) users of the trackers.

According to Fidus, one of the main reasons why the device has so many security flaws is that it doesn’t appear that the manufacturers, nor the companies reselling the devices, have conducted any security testing or penetration testing of the device.

PIN Problem

The research by Fidus also uncovered the fact that even though the manufacturers built in PIN functionality to help lock the devices down, the PIN, by default, is disabled and users need to read the manual to find out about it, and when enabled, the PIN is required as a prefix to any commands to be accepted by the device, except for REBOOT or RESET functionality.  The problem with this is that the RESET functionality is the thing that really could provide any malicious user with the ability to gain remote control of the device.  This is because is the RESET command that wipes all stored contacts and emergency contacts, restores the device to factory defaults and means that a PIN is no longer needed.

What Does This Mean For Your Business?

What is particularly disturbing about this story is that the tracking devices are used for some of the most vulnerable members of society.  Even though they have been marketed as a way to make a person safer, the cruel irony is that it appears that if they are taken over by a malicious attacker, they could put a person at greater risk.

This story also illustrates the importance of security penetration testing in discovering and plugging security loopholes in devices before making them widely available.  This is another example of an IoT/smart device that has security loopholes related to default settings, and with an ever-growing number of IoT devices out there, many of them perhaps not tested as well as they could be, many buyers are unknowingly at risk from hackers.f

Could Biometric Regulations Be On The Way Soon?

A written parliamentary question from MP Luciana Berger about the possibility of bringing forward legislation to regulate the use of facial recognition technology has led the Home Office to hint that the legislation (and more) may be on the way soon.

Questions and Answers

The question by the MP about bringing forward ‘biometrics legislation’ related to how facial recognition was being used for immigration purposes at airports. Last month, MP David Davis also asked about possible safeguards to protect the security and privacy of citizens’ data that is held as part of the Home Office’s biometrics programme.

Caroline Nokes has said on behalf of the Home Office, in response to these and other questions about biometrics, that options to simplify and extend governance and oversight of biometrics across the Home Office sector are being looked at, including where law enforcement, border and immigration control use of biometrics is concerned.  Caroline Nokes is also reported to have said that other measures would also be looked at with a view to improving the governance and use of biometrics in advance of “possible legislation”.

Controversial

There have been several controversial incidents where the Police have used/held trials of facial recognition at events and in public places, for example:

In February this year a deliberately overt trial of live facial recognition technology by the Metropolitan Police in the centre of Romford led to an incident whereby a man who was observed pulling his jumper over part of his face and putting his head down while walking past the police cameras ended up being fined after being challenged by police.  The 8-hour trial only resulted in three arrests as a direct result of facial recognition technology.

In December 2018 ICO head Elizabeth Dunham was reported to have launched a formal investigation into how police forces use facial recognition technology after high failure rates, misidentifications and worries about legality, bias, and privacy.

A trial of facial recognition at the Champions League final at the Millennium Stadium in Cardiff back in 2017 only yielded one arrest, and this was the arrest of a local man for something unconnected to the Champions League. This prompted criticism that the trial was a waste of money.

Biometrics – Approved By The FIDO Alliance

One area where biometrics has got the seal of approval by The FIDO Alliance is in its use in facial recognition, and fingerprint scanning as part the login for millions of Windows 10 devices from next month. The FIDO Alliance is an open industry association whose mission is to develop and promote authentication standards that help reduce the world’s over-reliance on passwords.

In a recent interview with CBNC, Microsoft’s Corporate Vice President and Chief Information Officer Bret Arsenault, signalled the corporation’s move away from passwords on their own as a means of authentication towards biometrics and a “passwordless future”.  Windows Hello (the Windows 10 authenticator) has been built to align with FIDO2 standards so it works with Microsoft cloud services, and this has led to the FIDO Alliance now granting Microsoft official certification for Windows Hello from the forthcoming May 2019 upgrade.

What Does This Mean For Your Business?

Taking images of our faces as part of a facial recognition system used by the government may seem like an efficient way of identifying and verification e.g. for immigration purposes, but our facial images constitute personal data.  For this reason, we should be concerned about how and where they are gathered (with or without our knowledge) and how they are stored, as well as how and why they are used.  There are security and privacy matters to consider, and it may well make sense to put regulations and perhaps legislation in place now in order to provide some protection for citizens and to ensure that biometrics are used responsibly by all, including the state, and that privacy and security are given proper consideration.

It should be remembered that some of the police facial recognition tests have led to mistaken identity, and this is a reminder that the technology is still in its early stages, and this may provide another reason for regulations and legislation now.

Microsoft’s Move Away From Passwords Towards Biometrics

In a recent interview with CBNC, Microsoft’s Corporate Vice President and Chief Information Officer Bret Arsenault signalled the corporation’s move away from passwords on their own as a means of authentication towards (biometrics) and a “passwordless future”.

Passwords – Not Enough On Their Own

Many of us are now used to two-factor authentication e.g. receiving a code via text or using apps such as Google Authenticator as a more secure way of using passwords.  Mr Arsenault also notes that hacking methods such as “password spraying”, where attackers attempt to access large numbers of accounts at once using some of the most commonly used passwords, are still effective and highlight the weakness of relying on passwords being used on their own.  Mr Arsenault highlights how damaging this can be for businesses where a hacker can get password/employee identity and use this to gain access to a whole network. This is one of the reasons why many businesses, including Microsoft, are moving away from the whole idea of passwords.

Setting Example – Biometrics

Microsoft is one of the most-attacked companies in the world, and this, combined with reports of the billions of password hack incidents worldwide, have driven the company to move beyond passwords.

For example, 90% of Microsoft’s 135,000 workforce can now log into the company’s corporate network without passwords using biometric technology such as facial recognition and fingerprint scanning via apps such as ‘Windows Hello’ and the ‘Authenticator’ app.

Also Uses Federated Cybersecurity

In addition to rejecting passwords for biometrics, Microsoft also uses a federated cybersecurity model.  This means that each Microsoft product has its own head of cybersecurity and that ethical hackers are actively encouraged to attack the company’s networks and products to test for flaws.

Scrapping Password Expiration Policies

Microsoft has announced that it is scrapping its password expiration policies in Windows 10 arguing that password expiration is an out of date method of data protection.  Users will now effectively be forced to update their passwords every few months once the Windows 10 May 2019 has been rolled out.

Other Tech Companies Moving Away From Passwords

Other tech companies that are known to be moving away from passwords towards biometrics and other methods include Google which has been testing USB key fobs which plug into customers’ computers and provide a second factor of authentication and Cisco which acquired dual-factor authentication start-up Duo in 2018.

What Does This Mean For Your Business?

As Microsoft points out, multi-factor authentication is more secure than relying on just a password for authentication, as password spraying and credential stuffing are widely in use and are still yielding good results for hackers.  As a recent National Cyber Security Centre (NCSC) survey has shown, many people still rely upon weak passwords, with ‘123456’ featuring 23 million times, making it the most widely-used password on breached accounts. There is a strong argument, therefore, for many businesses to look, as Microsoft is looking, towards more secure biometric methods of authentication, and towards a “passwordless future”.

Even though biometrics has been shown to make things incredibly difficult for cybercriminals to crack it, biometrics has not proven to have been 100% successful to date.  For example, a Reddit user recently claimed to have used a 3D printer to clone a fingerprint and then use that fake fingerprint to beat the in-display fingerprint reader on a Samsung Galaxy S10. Also, there was the report of the Twitter user who claimed to have fooled Nokia 9 PureView’s fingerprint scanner by using somebody else’s finger, and then just a packet of chewing gum, and of the incident back in May 2017 where a BBC reporter said that he’d been able to fool HSBC’s biometric voice recognition system by passing his brother’s voice off as his own.

There is no doubt that the move away from passwords to biometrics is now underway, but we are still in the relatively early stages.

First Organ Delivery By Drone

A human kidney for transplant has been delivered by drone to a Medical Centre in Baltimore in the first flight of its kind.

Cutting Edge Technology

The drone transportation of the living organ over a one-mile journey used cutting-edge technology in the form of an AI-powered drone that had been specifically designed to maintain and monitor the organ during the journey.  As well as having a specially designed compartment to keep the organ in the right condition for transplant, the drone had onboard communications and safety systems to enable a safe flight over densely-populated/urban areas, and a parachute recovery system in case the drone failed.

Collaboration

The drone’s creation was the product of a collaboration between the aviation and engineering experts at the University of Maryland (UMD), transplant specialists and researchers at the University of Maryland School of Medicine (UMSOM), and others at the Living Legacy Foundation of Maryland.  Joseph Scalea, assistant professor of surgery at University of Maryland School of Medicine (UMSOM) who was one of the surgeons who carried out the transplant has also acknowledged the collaborative efforts of the surgeons, engineers, the Federal Aviation Administration (FAA), the organ procurement specialists, the drone pilots, nurses at the hospital, and the patient.

Solves Problems

The ability to deliver transplant organs by drone solves the problems caused primarily by traffic problems identified by the United Network for Organ Sharing, which reported that in 2018 there were nearly 114,000 people on waiting lists, with 1.5% of organs not making it to the destination and nearly 4% being delayed by two hours or more.

Medical Sample Delivery Too

There has also been a recent report in North Carolina of a hospital, in partnership with UPS, using a drone delivery program to speed up the delivery of critical medical samples across a hospital campus, thereby cutting 41 minutes off the usual on-foot journey.

Potential

The fact that the organ drone flight and the transplant operation were safe and successful has led to the recognition of the potential of this method e.g. unmanned transportation of organs over greater distances, minimising the need for multiple pilots and flight time and addressing safety issues.

What Does This Mean For Your Business?

This world-first in organ transportation is an important first step in what could be (if proven to be safe and reliable over multiple flights) an important new technological improvement to the provision of life-saving medicine.

Business owners may also be thinking that if this can be done successfully with something as important and delicate as a human organ for transplant, this system could potentially be scaled up and used to ensure the fast, safe delivery of other items. Amazon, for example, has been testing delivery drones for parcels since 2013 with a view to making its ‘Prime Air’ service a regular reality in the future.

As shown by UPS’s involvement with medical sample delivery, other major delivery companies are also investing in drones and their potential to combat the challenges posed by traffic congestion and labour-intensive and time-consuming on-foot journeys.

Also, the US Federal Aviation Administration has just authorised Alphabet’s (Google’s) Wing Aviation to start delivering goods via drones later this year.  This is the first time that the FAA has granted an “air-carrier” the certification for drone delivery of items such as food, medicine, and other small consumer products.

Drone transportation is clearly moving forward and starting to prove that it offers great potential in many different sectors in the not-too-distant future.

Tech Tip – The JigSpace App

If you’d like to have the ability to instantly see a step-by-step interactive 3D breakdown of a complex idea, product, or phenomenon, so that you can understand exactly how it works, and be able to explain it (e.g. for a work or education project) then the JigSpace app could be for you.

The JigSpace app for iPhone and iPad is a platform to explore and share interactive, 3D ‘knowledge for anything’. When you ask, “How does that work?” the answer is right in front of you in … interactive 3D. The basic JigSpace app is available for free from Apple iTunes.