Techmeme: Google discloses SSL 3.0 vulnerability POODLE, recommends clients and servers support TLS_FALLBACK_SCSV to prevent protocol downgrade attacks, says Chrome does (Bodo Möller/Google Online Security Blog)

Open Links In New Tab

Mobile Archives Advertise Site News Contact Editors

October 15, 2014, 11:15 AM

Top News

Bodo Möller / Google Online Security Blog:

Google discloses SSL 3.0 vulnerability POODLE, recommends clients and servers support TLS_FALLBACK_SCSV to prevent protocol downgrade attacks, says Chrome does — This POODLE bites: exploiting the SSL 3.0 fallback — Today we are publishing details of a vulnerability in the design of SSL version 3.0.

Adam Langley / ImperialViolet:

POODLE detailed; how to disable SSL 3.0 in Chrome, Firefox; disabling it on servers may break IE6 — POODLE attacks on SSLv3 — My colleague, Bodo Möller, in collaboration with Thai Duong and Krzysztof Kotowicz (also Googlers), just posted details about a padding oracle attack against CBC-mode ciphers in SSLv3.

More: PandoDaily, A Few Thoughts …, Financial Times, Netcraft, DSLreports, Ars Technica, Errata Security, BBC, Guardian, Computerworld, chromium.googlesource.com and BetaNews. Tweets: @passy

Richard Barnes / Mozilla Security Blog:

Firefox will disable SSL 3.0 in version 34, to be released Nov. 25 — The POODLE Attack and the End of SSL 3.0 — Summary — SSL version 3.0 is no longer secure. Browsers and websites need to turn off SSLv3 and use more modern security protocols as soon as possible, in order to avoid compromising users' private information.

More: eWeek, Gizmodo, Reuters, MARC, BetaNews, addons.mozilla.org, VentureBeat, Electronista, Neowin, Fedora Magazine, Gigaom and bit-tech.net

Brad Molen / Engadget:

Samsung Galaxy Note 4 review: the best big-screen phone you can buy right now — What began in 2011 as a brand-new phone category has flourished into one of the most popular in the world. Smartphones with big screens (phablets, to some) are now ubiquitous, but it all started with an odd device called the Samsung Galaxy Note.

More: BGR, Re/code, Laptop Mag, The Verge, Gizmodo, CNNMoney.com, Ars Technica, PC World, New York Times, The Next Web, Android Police, Gigaom, ZDNet, VentureBeat, Business Insider, AnandTech, DailyTech, Wall Street Journal and SlashGear

Brian Barrett / Gizmodo:

Leaked: Fitbit Charge, like Force but without nickel, and Charge HD with heart rate monitoring — Exclusive: Fitbit Charge and Charge HR Images and Full Features List — After earlier reports that Fitbit may be working on two new activity trackers, a tipster has sent us what appears …

More: ITworld.com, SmarterWatching, Engadget, TechnoBuffalo, Wearable Tech Insider, Wearables Arena, stuff.tv, App Advice, Connectedly, Electronista, Business Insider, The Verge and SlashGear

Peter Kafka / Re/code:

HBO Says Web Subscriptions Coming in 2015 — HBO says it's finally ready: Sometime in the next year the pay TV service will be selling a Web-only offering. — HBO CEO Richard Plepler, speaking at an investor presentation hosted by HBO parent company Time Warner, said the company …

More: BGR, Gizmodo, The Verge and VentureBeat

Tweets: @mathewi, @geoffreyfowler, @pkafka, @pkafka, @pkafka, @pkafka, @pkafka, @pkafka and @pkafka

See also Mediagazer

Dean Takahashi / VentureBeat:

Qualcomm buys Bluetooth and GPS chip maker CSR for $2.5B — Qualcomm announced that it has agreed to acquire chip maker CSR for $2.5 billion in cash as part of its continuing strategy to dominate the electronics in mobile devices. — San Diego, Calif.-based Qualcomm will add a wide variety …

More: The Register, PC World, Fortune, Bloomberg, Inquirer, New York Times, Gigaom, Reuters, TechCrunch, Wall Street Journal and socalTECH.com

Kyle Wagner / Deadspin:

The Future Of The Culture Wars Is Here, And It's Gamergate — Over the weekend, a game developer in Boston named Brianna Wu fled her home after an online stalker vowed to rape and kill her. She isn't the first woman who's been forced into hiding by aggrieved video game fans associated with Gamergate …

More: Utah State Today, Standard-Examiner, Kotaku, BBC, Ars Technica, The Verge, Washington Post, CNET, Engadget, Raw Story, Forbes, we hunted the mammoth, Electronista, destructoid, GamesIndustry.biz, Naked Security, Techly and TIME

Tweets: @nataliezed, @smc90, @rachelrosenfelt, @mattzollerseitz, @soniasaraiya and @glennf

Rob Hayes / abc7.com:

Disney Accelerator program invests in 10 tech startups — Ten companies, 15 weeks and $120,000. Three components of Disney Accelerator, a mentorship and investment program designed for tech startups with a focus on media and entertainment. — The program brings together ten companies for 15 weeks to incubate their ideas.

More: Mashable, socalTECH.com, EdSurge and LaughingPlace.com

Michael Brown / PC World:

Sonos Boost, a high-power signal amplifier, now available for $99 — Sonos Boost promises to eliminate network dead spots on a Sonos network — If you own a Sonos multi-room audio system but have trouble with dead spots, Sonos has good news for you: The all-new Sonos Boost …

More: TechCrunch, 9to5Mac, TechRadar.com, SlashGear, Digital Trends and AndroidHeadlines.com

Husain Sumra / MacRumors:

Initial iPad Air 2 Supplies May Be Limited, 27-Inch Retina Display iMac Launching by End of 2014 — Just about a day before Apple's October 16 media event, KGI Securities analyst Ming-Chi Kuo has issued a new report, saying that he expects supplies of iPad Air 2s to be constrained.

More: 9to5Mac, BGR, Business Insider, iPhone in Canada Blog, Gotta Be Mobile, Gotta Be Mobile, Geeky Gadgets, iDownloadBlog.com and App Advice

Dave Smith / Business Insider:

How Seth Weintraub, an IT professional, started one of the biggest Apple news blogs, 9to5Mac — How An IT Guy Stranded In Paris Turned Himself Into The Most Powerful Source Of Apple News — There's one website that breaks more Apple news than any other — 9to5Mac.

More: Nieman Lab. Tweets: @jyarow, @redletterdave and @markgurman. Thanks:@redletterdave

Robin Wauters / Tech.eu:

Polish startup Brainly raises $9m to make a major push into the US with its social learning platform — Brainly, the Polish edtech startup that we recently paid a visit, has closed a $9 million round from lead General Catalyst Partners, Point Nine Capital and Runa Capital.

More: TechCrunch, Re/code and PE Hub Blog

Dean Takahashi / VentureBeat:

Asus' PadFone X mini $200 phone-tablet hybrid with Intel processor coming to AT&T on Oct 24th — Intel finally gets a break with big smartphone chip customer Asus — Above: Asus smartphone with Intel chips — Intel finally has a big customer for its smartphone chips.

More: Intel Newsroom, Android Police, The Verge, Electronista, Android and Me, IntoMobile, Android Central, SlashGear, Geeky Gadgets, PC World, Geeky Gadgets, Gizmodo, Wall Street Journal, Gigaom, Engadget and CNET

Danielle Friedman / NBC News:

Facebook and Apple to cover up to $20K in egg-freezing treatments for female employees — Facebook and Apple Now Pay for Women to Freeze Eggs — While techniques and success rates are improving, there's no guarantee the procedure will lead to a baby down the road.

Matt Brian / Engadget:

Amazon UK launches free same-day collection for Prime members — In a bid to deal another blow to bricks-and-mortar stores in the UK, Amazon is branching out into same-day deliveries. It's teamed up with newspaper distributor Connect Group to launch “Pass My Parcel,” which will ensure packages …

More: Thomson IR, VentureBeat, SlashGear, Electronista, Geeky Gadgets, CrackBerry.com, The Next Web and Geeky Gadgets

Dawn Chmielewski / Re/code:

Apple Asks Court's Permission to Challenge GT Bankruptcy — In Secret — Apple is seeking court permission to lodge its objections to GT Advanced Technologies' bankruptcy filing in secret, to protect details of its confidential agreements with its would-be supplier of sapphire crystal.

More: Ars Technica, Bloomberg, ITProPortal, App Advice, AppleInsider and Business Insider

Daisuke Wakabayashi / Wall Street Journal:

GT Advanced was not meeting Apple's deadlines as early as February; CEO, COO set plans to sell stock shortly after

More: Business Insider, Fortune, Bloomberg, TUAW, MacNN, The Guardian, SlashGear, iPhone in Canada Blog, Electronista, AppleInsider, 9to5Mac, Patently Apple, Cult of Mac, MacRumors and MacDailyNews

Jeremy Kirk / Computerworld:

‘Hurricane Panda’ hackers used Microsoft zero-day — The group, which targets technology infrastructure companies, is believed to be linked to China's government — One of the zero-day flaws patched by Microsoft on Tuesday had been used for some time by a group with suspected Chinese government ties …

More: CrowdStrike Blog, Help Net Security, Infosecurity Magazine, The Register and eWeek

Gertrude Chavez-Dreyfuss / Reuters:

NY state says bitcoin software developers don't need license — (Reuters) - New York will not require digital currency software developers to obtain a “BitLicense” to operate in the state, said Benjamin Lawksy, superintendent of financial services for the state of New York, on Tuesday.

More: CoinDesk, ZDNet, CryptoCoinsNews, Inside Bitcoins and Wall Street Journal

Sunil Paul / Sidecar:

Sidecar to legally operate at San Francisco Airport, will begin within 30 days — Sidecar and SFO Reach Milestone Agreement — Today, we're proud to announce a milestone agreement with San Francisco International Airport (SFO) that allows Sidecar to legally operate at the airport.

More: Wall Street Journal, VentureBeat, GeekWire, The Next Web, FlySFO, Re/code and Gigaom

Sponsor Posts

Command Line:

Copilot to autopilot: Why no single safeguard is enough — Microsoft designed a layered model that lets an AI agent resolve network incidents on its own within defined boundaries.

Will Reed:

The best sales leaders aren't job hunting. Here's how to reach them without months of cold outreach. — Our team came from Box, Square, and Brex, so we already know the GTM leaders worth meeting.

Zoho:

Diwali 2026: Your festive planning checklist with Zoho Notebook — The Diwali countdown is on! From lighting up every corner of the house to going a little overboard with the festive shopping …

IDrive:

Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Sponsor Techmeme

Featured Podcasts

Great Chat:

AI's Spooky Season

A podcast mostly about tech. Brought to you weekly by Angela Du, Sally Shin, Mac Bohannon, Helen Min, and Ashley Mayer.

Subscribe to Great Chat.

Sources:

Sundar Pichai on Gemini 4 and the AI compute crunch

Candid conversations with the leaders shaping what's next in AI and the broader tech industry. Hosted by Alex Heath, who has covered Silicon Valley for more than a decade.

Subscribe to Sources.

Machine Gods:

Bots Behaving Badly + Is AI Regulation On The Right Track + Kevin's Sloppelganger

The official podcast of the singularity, from Casey Newton and Kevin Roose. Twice-weekly news, analysis, and interviews with the people who are building the future.

Subscribe to Machine Gods.

Channels with Peter Kafka:

Netflix in Turmoil + Derek Thompson on AI & The Antisocial Century

Media and tech aren't just intersecting - they're fully intertwined. To understand how those worlds work, Peter Kafka talks to industry leaders, upstarts and observers.

Subscribe to Channels with Peter Kafka.

Big Technology Podcast:

Google CEO Sundar Pichai: AI's Infinite Possibilities, Compute Scarcity Dilemmas, Future AI Products

The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.

Subscribe to Big Technology Podcast.

Cheeky Pint:

How Toto Wolff built the most valuable team in F1

Stripe cofounder John Collison interviews founders, builders, and leaders over a pint.

Subscribe to Cheeky Pint.

Add your podcast here

About This Page

This is a Techmeme archive page. It shows how the site appeared at 11:15 AM ET, October 15, 2014.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.