Techmeme: Bash bug as big as Heartbleed (Robert Graham/Errata Security)

Open Links In New Tab

Mobile Archives Advertise Site News

September 25, 2014, 12:15 PM

Top News

Stephen Hall / 9to5Google:

Motorola Shamu (Nexus 6/X): 5.92" screen, 2560 x 1440 QHD resolution, 498 PPI display, 3,200 mAh battery — Exclusive: This is ‘Shamu,’ Motorola's upcoming Nexus 6/X — Yes, it looks like a Moto X. But it has a 5.9-inch screen. And lowered volume/lock buttons.

More: lcamtuf's blog, CNET, Gigaom, The Verge, Gizmodo, TechCrunch, Business Insider, DailyTech, Redmond Pie, TechnoBuffalo, ITProPortal, GadgeTell, Android Police, BGR, Electronista, Channel EYE, Pocketnow, Fudzilla, Digital Trends, Inquirer, Android Authority, Phones Review, SlashGear, Seeking Alpha, Droid Life, MobileSyrup.com, Phone Cruncher, Android Central and Phandroid. Tweets: @dannysullivan. Thanks:@rsgnl

Robert Graham / Errata Security:

Bash bug as big as Heartbleed — Today's bash bug is as big a deal as Heartbleed. That's for many reasons. — The first reason is that the bug interacts with other software in unexpected ways. We know that interacting with the shell is dangerous, but we write code that does it anyway.

Robert Graham / Errata Security:

Bash “shellshock” bug is wormable, a quick scan to uncover vulnerable servers has revealed — Bash ‘shellshock’ bug is wormable — Early results from my scan: there's about 3000 systems vulnerable just on port 80, just on the root “/” URL, without Host field.

More: FierceEnterpriseCommunications …, The Register and bit-tech.net

Liam Tung / ZDNet:

First attacks using Bash bug discovered in the wild, available patch only a partial fix — First attacks using ‘shellshock’ Bash bug discovered — Summary: Security researchers have found the first malware using the new Bash bug. — Liam Tung — Within a day of the Bash bug dubbed 'shellshock …

More: US-CERT, Bloomberg, BBC, Errata Security, Guardian, Graham Cluley and Schneier on Security. Tweets: @yinettesys

Steven J. Vaughan-Nichols / ZDNet:

Critical security hole uncovered in popular Unix/Linux shell Bash, affecting many web apps and servers

Dell Cameron / The Daily Dot:

Developer reported iCloud brute-force password hack to Apple in March 2014, months before Celebgate — Apple knew of iCloud security hole 6 months before Celebgate — Apple knew as early as March 2014 of a security hole that left the personal data of iCloud users vulnerable …

More: PandoDaily, BGR, AppleInsider, Ubergizmo, 9to5Mac, Geeky Gadgets, App Advice, MacRumors, iPhone in Canada Blog, Cult of Mac, Business Insider, Electronista, iLounge, Gizmodo, SlashGear, VentureBeat and Salon. Tweets: @ow

Kurt Wagner / Re/code:

Hootsuite raises $60M at a $1B valuation, acquires Zeetl to integrate voice calls in social media — Hootsuite Reaches $1 Billion Valuation in Latest Funding Round — Hootsuite, the Vancouver-based startup known for its social media management dashboards, has raised $60 million in new venture funding, CEO Ryan Holmes told Re/code.

More: Hootsuite Media, ZDNet, Techvibes Global News, GeekWire, Wall Street Journal, VentureBeat, New York Times, TechCrunch, Fortune, BetaKit, AllTwitter and PE Hub Blog

Kara Swisher / Re/code:

Joe Green Pushed Out at FWD.us — Joe Green, the president of FWD.us, has resigned from the political organization that is backed by a coterie of tech luminaries, most prominently Facebook CEO and co-founder Mark Zuckerberg. — And, according to a “confidential” email that Zuckerberg sent …

More: FWD.us, BuzzFeed, Politico, BREITBART.COM, The Daily Caller and Business Insider

Tweets: @ryangrim and @buzzfeedben

New York Times:

Lenders using tech to track cars of subprime borrowers, disable ignition if payments missed — Miss a Payment? Good Luck Moving That Car — Credit: John Gurzinski for The New York Times — The thermometer showed a 103.5-degree fever, and her 10-year-old's asthma was flaring up.

More: Boing Boing, Digital Trends and Wall Street Journal

Tweets: @katekellycnbc, @keithboykin, @nickbunkley, @zittrain, @nytimesbusiness and @digiphile

NPD Group:

US retail PC sales grew 3% in Back-to-School period led by Macs and Chromebooks, after declining 2.5% last year — Apple and Chrome Boost U.S. Retail PC Back-to-School Sales — U.S. consumer retail PC sales grew almost 3 percent during the 10 week Back-to-School period …

More: AppleInsider, BGR, 9to5Mac, eWeek, BetaNews, iMore, ZDNet, Electronista and TUAW. Tweets: @monkbent

Craig Hockenberry / furbo.org:

Developer warns that in-app browsers can keylog on iOS, recommends Safari for OAuth handshake — In-App Browsers Considered Harmful — How many apps on your iPhone or iPad have a built-in browser? — Would it surprise you to know that every one of those apps could eavesdrop on your typing?

More: TUAW, MacRumors, Cult of Mac, Six Colors, DISPLAYBLOG, Gizmodo, SlashGear, iPhone in Canada Blog, App Advice and 9to5Mac

Tweets: @drbarnard and @chockenberry

Thorsten Von Eicken / RightScale Blog:

AWS to roll out urgent patch, will reboot the vast majority of EC2 instances beginning Sept 26 — AWS to Reboot a Substantial Number of EC2 Instances — Today Amazon Web Services (AWS) notified its customers that it will be rolling out an urgent patch to all hosts causing a maintenance reboot …

More: AWS Discussion Forums, SiliconANGLE, iTnews.com.au, ZDNet, The Register and Gigaom. Tweets: @mathewlodge

Juli Clover / MacRumors:

Apple Says iOS 8.0.2 Update is in the Works, Directs Users to Reinstall iOS 8 — Earlier today, Apple released iOS 8.0.1, which ended up disabling cellular service and Touch ID on many iPhone 6 and 6 Plus devices. Apple said that it was investigating the issue this afternoon …

Chris Welch / The Verge:

Apple pulls iOS 8.0.1 after users report losing cellular connections and problems with Touch ID

Lisa Vaas / Naked Security:

Disgruntled employees are increasingly e-sabotaging businesses, FBI says — Employees with an axe to grind are increasingly sticking it to their current or former employers using e-tools such as cloud storage sites or remote access to a company's computer network, the US Federal Bureau …

More: Internet Crime Complaint …, Help Net Security, The Register, Inquirer, VentureBeat, SC Magazine and SecurityWeek

Foo Yun Chee / Reuters:

Facebook to win EU approval for $19 billion WhatsApp bid: sources — (Reuters) - Facebook (FB.O), the world's leading social network, will win unconditional EU approval for its $19 billion offer for mobile messaging startup WhatsApp in a deal pitting it against telecoms operators, two people familiar with the matter said on Thursday.

More: Globe and Mail, TheStreet.com and Electronista

Sponsor Posts

Google:

Try Gemini 3 Pro — Google's newest and most intelligent AI model that helps you bring any idea to life

Shopify:

Transform ML Experimentation with Tangle — Save months of compute time with Tangle, built by Shopify. Try this open-source platform to simplify ML workflows, ensure reproducibility, and seamlessly share with collaborators.

Zoho:

Contract Signed. Project Ready. Tasks Created. — Every project begins with a promise; a contract that outlines the deliverables, the timelines, and the terms. But for most businesses …

Bitrix24:

Bitrix24 powers the next generation of high-performing businesses — Chat, projects, CRM, and automation — all in one place. Replace dozens of tools so your team moves faster, collaborates smarter, and grows effortlessly.

IDrive:

Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Box data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Sponsor Techmeme

Featured Podcasts

Big Technology Podcast:

AI Device Wars Heat Up, RIP Metaverse?, Netflix Acquires Warner Brothers

The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.

Subscribe to Big Technology Podcast.

Channels with Peter Kafka:

"Hollywood is Truly Freaked Out." Inside the Netflix/WBD Deal with Lucas Shaw

Media and tech aren't just intersecting - they're fully intertwined. To understand how those worlds work, Peter Kafka talks to industry leaders, upstarts and observers.

Subscribe to Channels with Peter Kafka.

Hard Fork:

OpenAI Calls a 'Code Red' + Which Model Should I Use? + The Hard Fork Review of Slop

The future is already here. Each week, journalists Kevin Roose and Casey Newton explore and make sense of the latest in the rapidly changing world of tech.

Subscribe to Hard Fork.

Access:

Is Roblox making the internet better or worse? We asked the CEO

A show about the tech industry's inside conversation, hosted by tech reporter Alex Heath and founder whisperer Ellis Hamburger.

Subscribe to Access.

Decoder with Nilay Patel:

Anthropic's quest to study the negative effects of AI is under pressure

A show from the Verge about big ideas - and other problems.

Subscribe to Decoder with Nilay Patel.

Lenny's Podcast:

Why LinkedIn is turning PMs into AI-powered "full stack builders" | Tomer Cohen (LinkedIn CPO)

Interviews with world-class product leaders and growth experts to uncover actionable advice to help you build, launch, and grow your own product.

Subscribe to Lenny's Podcast.

Add your podcast here

About This Page

This is a Techmeme archive page. It shows how the site appeared at 12:15 PM ET, September 25, 2014.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.