Techmeme: Google discloses SSL 3.0 vulnerability POODLE, recommends clients and servers support TLS_FALLBACK_SCSV to prevent protocol downgrade attacks, says Chrome does (Bodo Möller/Google Online Security Blog)

Open Links In New Tab

Mobile Archives Advertise Site News

October 15, 2014, 11:15 AM

Top News

Bodo Möller / Google Online Security Blog:

Google discloses SSL 3.0 vulnerability POODLE, recommends clients and servers support TLS_FALLBACK_SCSV to prevent protocol downgrade attacks, says Chrome does — This POODLE bites: exploiting the SSL 3.0 fallback — Today we are publishing details of a vulnerability in the design of SSL version 3.0.

Adam Langley / ImperialViolet:

POODLE detailed; how to disable SSL 3.0 in Chrome, Firefox; disabling it on servers may break IE6 — POODLE attacks on SSLv3 — My colleague, Bodo Möller, in collaboration with Thai Duong and Krzysztof Kotowicz (also Googlers), just posted details about a padding oracle attack against CBC-mode ciphers in SSLv3.

More: PandoDaily, A Few Thoughts …, Financial Times, Netcraft, DSLreports, Ars Technica, Errata Security, BBC, Guardian, Computerworld, chromium.googlesource.com and BetaNews. Tweets: @passy

Richard Barnes / Mozilla Security Blog:

Firefox will disable SSL 3.0 in version 34, to be released Nov. 25 — The POODLE Attack and the End of SSL 3.0 — Summary — SSL version 3.0 is no longer secure. Browsers and websites need to turn off SSLv3 and use more modern security protocols as soon as possible, in order to avoid compromising users' private information.

More: eWeek, Gizmodo, Reuters, MARC, BetaNews, addons.mozilla.org, VentureBeat, Electronista, Neowin, Fedora Magazine, Gigaom and bit-tech.net

Brad Molen / Engadget:

Samsung Galaxy Note 4 review: the best big-screen phone you can buy right now — What began in 2011 as a brand-new phone category has flourished into one of the most popular in the world. Smartphones with big screens (phablets, to some) are now ubiquitous, but it all started with an odd device called the Samsung Galaxy Note.

More: BGR, Re/code, Laptop Mag, The Verge, Gizmodo, CNNMoney.com, Ars Technica, PC World, New York Times, The Next Web, Android Police, Gigaom, ZDNet, VentureBeat, Business Insider, AnandTech, DailyTech, Wall Street Journal and SlashGear

Brian Barrett / Gizmodo:

Leaked: Fitbit Charge, like Force but without nickel, and Charge HD with heart rate monitoring — Exclusive: Fitbit Charge and Charge HR Images and Full Features List — After earlier reports that Fitbit may be working on two new activity trackers, a tipster has sent us what appears …

More: ITworld.com, SmarterWatching, Engadget, TechnoBuffalo, Wearable Tech Insider, Wearables Arena, stuff.tv, App Advice, Connectedly, Electronista, Business Insider, The Verge and SlashGear

Peter Kafka / Re/code:

HBO Says Web Subscriptions Coming in 2015 — HBO says it's finally ready: Sometime in the next year the pay TV service will be selling a Web-only offering. — HBO CEO Richard Plepler, speaking at an investor presentation hosted by HBO parent company Time Warner, said the company …

More: BGR, Gizmodo, The Verge and VentureBeat

Tweets: @mathewi, @geoffreyfowler, @pkafka, @pkafka, @pkafka, @pkafka, @pkafka, @pkafka and @pkafka

See also Mediagazer

Dean Takahashi / VentureBeat:

Qualcomm buys Bluetooth and GPS chip maker CSR for $2.5B — Qualcomm announced that it has agreed to acquire chip maker CSR for $2.5 billion in cash as part of its continuing strategy to dominate the electronics in mobile devices. — San Diego, Calif.-based Qualcomm will add a wide variety …

More: The Register, PC World, Fortune, Bloomberg, Inquirer, New York Times, Gigaom, Reuters, TechCrunch, Wall Street Journal and socalTECH.com

Kyle Wagner / Deadspin:

The Future Of The Culture Wars Is Here, And It's Gamergate — Over the weekend, a game developer in Boston named Brianna Wu fled her home after an online stalker vowed to rape and kill her. She isn't the first woman who's been forced into hiding by aggrieved video game fans associated with Gamergate …

More: Utah State Today, Standard-Examiner, Kotaku, BBC, Ars Technica, The Verge, Washington Post, CNET, Engadget, Raw Story, Forbes, we hunted the mammoth, Electronista, destructoid, GamesIndustry.biz, Naked Security, Techly and TIME

Tweets: @nataliezed, @smc90, @rachelrosenfelt, @mattzollerseitz, @soniasaraiya and @glennf

Rob Hayes / abc7.com:

Disney Accelerator program invests in 10 tech startups — Ten companies, 15 weeks and $120,000. Three components of Disney Accelerator, a mentorship and investment program designed for tech startups with a focus on media and entertainment. — The program brings together ten companies for 15 weeks to incubate their ideas.

More: Mashable, socalTECH.com, EdSurge and LaughingPlace.com

Michael Brown / PC World:

Sonos Boost, a high-power signal amplifier, now available for $99 — Sonos Boost promises to eliminate network dead spots on a Sonos network — If you own a Sonos multi-room audio system but have trouble with dead spots, Sonos has good news for you: The all-new Sonos Boost …

More: TechCrunch, 9to5Mac, TechRadar.com, SlashGear, Digital Trends and AndroidHeadlines.com

Husain Sumra / MacRumors:

Initial iPad Air 2 Supplies May Be Limited, 27-Inch Retina Display iMac Launching by End of 2014 — Just about a day before Apple's October 16 media event, KGI Securities analyst Ming-Chi Kuo has issued a new report, saying that he expects supplies of iPad Air 2s to be constrained.

More: 9to5Mac, BGR, Business Insider, iPhone in Canada Blog, Gotta Be Mobile, Gotta Be Mobile, Geeky Gadgets, iDownloadBlog.com and App Advice

Dave Smith / Business Insider:

How Seth Weintraub, an IT professional, started one of the biggest Apple news blogs, 9to5Mac — How An IT Guy Stranded In Paris Turned Himself Into The Most Powerful Source Of Apple News — There's one website that breaks more Apple news than any other — 9to5Mac.

More: Nieman Lab. Tweets: @jyarow, @redletterdave and @markgurman. Thanks:@redletterdave

Robin Wauters / Tech.eu:

Polish startup Brainly raises $9m to make a major push into the US with its social learning platform — Brainly, the Polish edtech startup that we recently paid a visit, has closed a $9 million round from lead General Catalyst Partners, Point Nine Capital and Runa Capital.

More: TechCrunch, Re/code and PE Hub Blog

Dean Takahashi / VentureBeat:

Asus' PadFone X mini $200 phone-tablet hybrid with Intel processor coming to AT&T on Oct 24th — Intel finally gets a break with big smartphone chip customer Asus — Above: Asus smartphone with Intel chips — Intel finally has a big customer for its smartphone chips.

More: Intel Newsroom, Android Police, The Verge, Electronista, Android and Me, IntoMobile, Android Central, SlashGear, Geeky Gadgets, PC World, Geeky Gadgets, Gizmodo, Wall Street Journal, Gigaom, Engadget and CNET

Danielle Friedman / NBC News:

Facebook and Apple to cover up to $20K in egg-freezing treatments for female employees — Facebook and Apple Now Pay for Women to Freeze Eggs — While techniques and success rates are improving, there's no guarantee the procedure will lead to a baby down the road.

Matt Brian / Engadget:

Amazon UK launches free same-day collection for Prime members — In a bid to deal another blow to bricks-and-mortar stores in the UK, Amazon is branching out into same-day deliveries. It's teamed up with newspaper distributor Connect Group to launch “Pass My Parcel,” which will ensure packages …

More: Thomson IR, VentureBeat, SlashGear, Electronista, Geeky Gadgets, CrackBerry.com, The Next Web and Geeky Gadgets

Dawn Chmielewski / Re/code:

Apple Asks Court's Permission to Challenge GT Bankruptcy — In Secret — Apple is seeking court permission to lodge its objections to GT Advanced Technologies' bankruptcy filing in secret, to protect details of its confidential agreements with its would-be supplier of sapphire crystal.

More: Ars Technica, Bloomberg, ITProPortal, App Advice, AppleInsider and Business Insider

Daisuke Wakabayashi / Wall Street Journal:

GT Advanced was not meeting Apple's deadlines as early as February; CEO, COO set plans to sell stock shortly after

More: Business Insider, Fortune, Bloomberg, TUAW, MacNN, The Guardian, SlashGear, iPhone in Canada Blog, Electronista, AppleInsider, 9to5Mac, Patently Apple, Cult of Mac, MacRumors and MacDailyNews

Jeremy Kirk / Computerworld:

‘Hurricane Panda’ hackers used Microsoft zero-day — The group, which targets technology infrastructure companies, is believed to be linked to China's government — One of the zero-day flaws patched by Microsoft on Tuesday had been used for some time by a group with suspected Chinese government ties …

More: CrowdStrike Blog, Help Net Security, Infosecurity Magazine, The Register and eWeek

Gertrude Chavez-Dreyfuss / Reuters:

NY state says bitcoin software developers don't need license — (Reuters) - New York will not require digital currency software developers to obtain a “BitLicense” to operate in the state, said Benjamin Lawksy, superintendent of financial services for the state of New York, on Tuesday.

More: CoinDesk, ZDNet, CryptoCoinsNews, Inside Bitcoins and Wall Street Journal

Sunil Paul / Sidecar:

Sidecar to legally operate at San Francisco Airport, will begin within 30 days — Sidecar and SFO Reach Milestone Agreement — Today, we're proud to announce a milestone agreement with San Francisco International Airport (SFO) that allows Sidecar to legally operate at the airport.

More: Wall Street Journal, VentureBeat, GeekWire, The Next Web, FlySFO, Re/code and Gigaom

Sponsor Posts

Google:

Try Gemini 3 Pro — Google's newest and most intelligent AI model that helps you bring any idea to life

Shopify:

Shopify: Revolutionizing Commerce with Winter Edition '26 — Over 150+ new features transform how merchants build, design, and grow—with technology that amplifies creative vision.

Zoho:

Email fatigue is real: Here's how smart email tools help you regain control — Picture this: It's Monday morning. You walk into the office feeling energized and ready to take on the week.

IDrive:

Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Box data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Sponsor Techmeme

Featured Podcasts

Lenny's Podcast:

Why humans are AI's biggest bottleneck (and what's coming in 2026) | Alexander Embiricos (OpenAI Codex Product Lead)

Interviews with world-class product leaders and growth experts to uncover actionable advice to help you build, launch, and grow your own product.

Subscribe to Lenny's Podcast.

Big Technology Podcast:

OpenAI's 2026 Priority, Disney's AI Play, Datacenter Buildout Trouble

The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.

Subscribe to Big Technology Podcast.

Hard Fork:

Australia Kicks Kids Off Social Media + Is the A.I. Water Issue Fake? + Hard Fork Wrapped

The future is already here. Each week, journalists Kevin Roose and Casey Newton explore and make sense of the latest in the rapidly changing world of tech.

Subscribe to Hard Fork.

Access:

Why the next AI frontier is phone calls, with Beside CEO Maxime Germain

A show about the tech industry's inside conversation, hosted by tech reporter Alex Heath and founder whisperer Ellis Hamburger.

Subscribe to Access.

Great Chat:

So what happens after AGI?

A podcast mostly about tech. Brought to you weekly by Angela Du, Sally Shin, Mac Bohannon, Helen Min, and Ashley Mayer.

Subscribe to Great Chat.

Tools and Weapons with Brad Smith:

Ted Sarandos: Netflix and how tech changed storytelling

Microsoft Vice Chair and President Brad Smith speaks with leaders in government, business, and culture to explore the most critical challenges at the intersection of technology and society.

Subscribe to Tools and Weapons with Brad Smith.

Add your podcast here

About This Page

This is a Techmeme archive page. It shows how the site appeared at 11:15 AM ET, October 15, 2014.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.