Techmeme: Heartbleed: mundane coding error more devastating than fancy crypto attacks like BEAST, CRIME (Matthew Green/A Few Thoughts …)

Open Links In New Tab

Mobile Archives Advertise Site News Contact Editors

April 8, 2014, 7:15 PM

Top News

Heartbleed:

Heartbleed bug allows anyone on the Internet to read the memory of systems protected by vulnerable versions of OpenSSL — The Heartbleed Bug — The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected …

More: OpenSSL, ZDNet, existential type crisis, The LastPass Blog, CloudFlare Blog, Tumblr Staff, eWeek, web.nvd.nist.gov, ReadWrite, The Register, Tor, US-CERT, Heroku, Computerworld, TechCrunch, TechCrunch, Los Angeles Times, SiliconANGLE, PandoDaily, The Verge, SSegurança, Gizmodo, SC Magazine, Agile Blog, Techdirt, WP Engine, LinuxInsider, SiliconBeat, Threatpost, Fox-IT International blog, Netcraft, Krebs on Security, TechSpot, CoinDesk, Guardian, Lifehacker, Giles Bowkett, Softpedia News, NextBigWhat, Daily Dot, The Hacker News, SecurityWeek, Forbes, Softpedia News, Twitter Status, VentureBreak, CoinReport, NGINX, The Tech Report, I4U News, Business Insider and Help Net Security

Tweets: @mattblaze, @neogeen, @calebgarling, @eastdakota, @ioerror, @anildash, @iljawascoding, @asher_wolf, @0xabad1dea, @ac3xx, @krisjelbring, @jruby and @braintree

Matthew Green / A Few Thoughts …:

Heartbleed: mundane coding error more devastating than fancy crypto attacks like BEAST, CRIME — Attack of the week: OpenSSL Heartbleed — Ouch. (Logo from heartbleed.com) — I start every lecture in my security class by asking the students to give us any interesting security …

More: Electronic Frontier Foundation, Ars Technica and SiliconANGLE

Stephen Shankland / CNET:

‘Heartbleed’ bug undoes Web encryption, reveals Yahoo passwords — A flaw in software that's widely used to secure Web communications means that passwords and other highly sensitive data could be exposed. Some say they've already found hundreds of Yahoo passwords.

Tweets: @briankrebs

Dan Goodin / Ars Technica:

Critical crypto bug in OpenSSL opens two-thirds of the Web to eavesdropping — For a more detailed analysis of this catastrophic bug, see this update, which went live about 18 hours after Ars published this initial post. — Researchers have discovered an extremely critical defect …

More: GitHub, ZDNet and Naked Security

Timothy B. Lee / Vox:

The Heartbleed Bug, explained

More: SlashGear. Tweets: @wpwend42 and @dangillmor

David Bellona / The Twitter Blog:

Twitter web gets new timeline filtering options, new profile design features ‘pinned’ and ‘best tweets’ — Coming soon: a whole new you, in your Twitter profile — Moment by moment, your Twitter profile shows the world who you are.

John Gruber / Daring Fireball:

Rather than diminish the web, mobile apps build on and diversify it, enabling new experiences — Rethinking What We Mean by ‘Mobile Web’ — Chris Dixon, in a piece titled “The Decline of the Mobile Web”, citing stats from ComScore and Flurry: … I think Dixon has it all wrong.

More: Matt Mullenweg and inessential.com. Tweets: @joshuatopolsky and @carnage4life

Chris Dixon / chris dixon's blog:

Mobile app dominance vs. web will hurt long-term innovation, likely make web a niche product

More: AVC, Gigaom, Haywire and Wall Street Journal

Mark Hachman / PC World:

Obituary: Windows XP passes away, leaving behind millions of mourning supporters — Windows XP, Microsoft Corp.'s beloved seventh major operating system and arguably the company's most successful, was left to perish on Tuesday at its creators' hands. It was 12 years, seven months old.

Paul Mutton / Netcraft:

Survey says 6000+ websites still hosted on Windows XP, including 14 belonging to US government

More: WinBeta, PC World and theWHIR.com

Douglas MacMillan / Wall Street Journal:

Atlassian Valued at $3.3 Billion Selling Business Software Sans Salespeople — Atlassian, an Australian maker of online collaboration tools for businesses, is gunning for the same market as fast-growing startup Box Inc. And like Box, Atlassian is also now one of the world's …

More: VentureBeat and Gigaom Research. Tweets: @scottmaustin

Claire Cain Miller / New York Times:

Google launches Glass at Work program for businesses, courts enterprise developers — At Google, Bid to Put Its Glasses To Work — SAN FRANCISCO — At the 500 Club bar in the heart of the Mission district here, patrons are banned from wearing Google Glass.

More: Re/code, Fortune, Gigaom, StrictlyVC, Glass Almanac, USA Today, Computerworld, VentureBeat, CNET, USA Today, TechSpot, Liliputing, PC World, SlashGear, The Technology Chronicles and Softpedia News. Tweets: @panzer

Josh Constine / TechCrunch:

Facebook Admits Users Are Confused About Privacy, Will Show More On-Screen Explanations — Facebook today offered reporters a deep dive on how it handles privacy and previewed some upcoming changes. The company revealed it does 80 trillion privacy checks per day on the backend to make sure data isn't wrongly exposed.

More: Re/code, SiliconBeat, AllFacebook, Gigaom, The Switch, VentureBeat and Inside Facebook

Alex Wilhelm / TechCrunch:

Ballmer, Not Nadella, Gave The Go-Ahead To Ship Office For iPad, Which Has Racked Up 12M Downloads — Update: I'm hearing that while Ballmer did intend to ship Office for iPad, it was Nadella who picked the date. This makes the below comment technically true, but perhaps slightly confusing.

More: CITEworld, eWeek, PC Magazine, GeekWire, Macworld, ZDNet, 9to5Mac and WinBeta

Tweets: @monkbent and @tomwarren

Mark Gurman / 9to5Mac:

Amazon A9′s VP of Search heads to Apple to fix up Maps search — Benoit Dupin, Vice President of Amazon A9′s Search Technology group, has left the high-profile search technology firm to take up a job with Apple. Dupin's profile from Amazon A9′s executive management website disappeared …

More: TechCrunch, GeekWire, Pocketnow, Gigaom, Beyond Search, InvestorPlace, iDownloadBlog.com, MacRumors, iPhone in Canada Blog and BGR. Thanks:@mikebeas

Nicole Perlroth / New York Times:

Hackers are breaching corporate networks increasingly via third-party devices and software — Hackers Lurking in Vents and Soda Machines — SAN FRANCISCO — They came in through the Chinese takeout menu. — Unable to breach the computer network at a big oil company …

More: Daily Dot and Gizmodo. Tweets: @jasonsack and @nicoleperlroth

Spencer E. Ante / Wall Street Journal:

Report: Samsung outspent Apple on US mobile phone ads by $12M in 2013, down from $68M in 2012 — Apple Closes U.S. Ad-Spending Gap With Samsung — Samsung is the still the king of the U.S. smartphone marketing race, but the Korean giant's rivals closed its huge lead with an advertising blitz in 2013.

More: MacRumors, iPhone Hacks, VentureBeat, iPhone in Canada Blog and Business Insider

Jeff Baumgartner / Multichannel:

Netflix Starts To Stream In 4K — Offers ‘House Of Cards’ Season Two, Selection Of Nature Documentaries In Ultra HD — Netflix confirmed Sunday that the second season of House of Cards and “some nature documentaries” are now available for streaming in the 4K/Ultra HD format.

More: CNET, TechCrunch, Ars Technica, HDTV News, The Verge, Computerworld, Consumerist, InvestorPlace, PC Magazine, TechSpot, SlashGear, Gizmodo and VentureBeat

Mike Isaac / Re/code:

Reddit Execs Ellen Pao and Jena Donlin Get Serious About the Site's Business (Q&A) — Reddit is one of the biggest sites on the Web. Now it just needs to start making it rain. — Since 2005, the online community message board and link-sharing site has risen from an esoteric bulletin board service …

Tweets: @laurahazardowen

Abhijeet M. / SamMobile:

Samsung Gear Fit updated with option to enable vertical display orientation — The Gear Fit is one of the prettiest and most stylish fitness tracker you will ever come across, with a beautiful AMOLED display the window into its functions and features. However, the Gear Fit had one tiny limitation …

More: The Verge, Engadget, Gigaom, BGR, Pocket-lint, GSMArena Blog, Softpedia News, Android Central and Phandroid

Joanna Stern / Wall Street Journal:

Samsung Gear Fit review: not as good as dedicated fitness trackers, weak battery life, notifications from Galaxy S5 work well

More: Re/code, Wall Street Journal and Telegraph. Tweets: @wjrothman

Amir Efrati / The Information:

Comcast preparing wireless service built on combination of Wi-Fi and leased cellular capacity — Comcast Quietly Preps Challenge to Wireless Carriers — Google isn't the only technology giant thinking of offering new mobile phone plans to unseat wireless giants.

More: The Verge, Gigaom, dailywireless.org, Mashable and Business Insider

Richard Byrne Reilly / VentureBeat:

U.S. Air Force is testing Google Glass & building apps for battlefield use (exclusive) — Above: Airforce test dummy wearing Google Glass — The U.S. Air Force's “BATMAN” research team at Wright Patterson Air Force Base in Ohio is beta-testing Google Glass for possible use on the battlefield.

More: 9to5Google and Gigaom Research. Tweets: @tim. Thanks:@harrisonweber

Sponsor Posts

Subquadratic:

Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens.

Cape:

Most carriers track everything. Cape doesn't. — Unlimited talk, text & data, 24-hr metadata deletion, network ID rotation, SIM-attack defense, and more. Switch today and get 29% off for life.

Zoho:

Introducing Zoho Sign MCP: AI-powered digital signature workflows for business — Ever wish you could have your AI agent send a document for signatures and track its progress for you?

IDrive:

Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Sponsor Techmeme

Featured Podcasts

Uncapped with Jack Altman:

Tony Xu from DoorDash

Conversations with people I admire about things I'm genuinely interested in.

Subscribe to Uncapped with Jack Altman.

Invest Like the Best:

Sam Altman - How to Make an Abundant Future

The leading destination to learn about business and investing. We do this by showcasing exceptional talent and ideas.

Subscribe to Invest Like the Best.

Grit:

Ex-Twitter CEO on Why AI Needs a New Internet | Parag Agrawal

Grit explores what it takes to create, build and scale world-class organizations.

Subscribe to Grit.

Lenny's Podcast:

Anthropic's first technical PM on token maxing, the jagged edge, and living in the future | Dianne Penn

Interviews with world-class product leaders and growth experts to uncover actionable advice to help you build, launch, and grow your own product.

Subscribe to Lenny's Podcast.

Big Technology Podcast:

What Happens If AI Fails?, Subprime Data Center Crisis, How Bad Can SpaceX Get?

The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.

Subscribe to Big Technology Podcast.

Tools and Weapons with Brad Smith:

Connecting the Unconnected: Doreen Bogdan-Martin

Microsoft Vice Chair and President Brad Smith speaks with leaders in government, business, and culture to explore the most critical challenges at the intersection of technology and society.

Subscribe to Tools and Weapons with Brad Smith.

Add your podcast here

About This Page

This is a Techmeme archive page. It shows how the site appeared at 7:15 PM ET, April 8, 2014.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.