Techmeme: Two people independently obtained SSL private keys with Heartbleed exploits, solving CloudFlare's challenge (CloudFlare)

Open Links In New Tab

Mobile Archives Advertise Site News Contact Editors

April 12, 2014, 11:30 AM

Top News

Michael Riley / Bloomberg:

NSA Said to Exploit Heartbleed Bug for Intelligence for Years — The U.S. National Security Agency knew for at least two years about a flaw in the way that many websites send sensitive information, now dubbed the Heartbleed bug, and regularly used it to gather critical intelligence, two people familiar with the matter said.

More: USA Today, Guardian, The Verge, NPR, Electronista, Computerworld, The Daily Caller, Salon, I4U News, TechnoBuffalo, Business Insider, Ubergizmo, The Mac Observer, Network World, SecurityWeek, Ars Technica, Slate, Wired, Los Angeles Times, Washington Post, Wall Street Journal, TIME, Mashable, BGR, The Register, BuzzFeed, Errata Security, Politico, SlashGear, Nextgov, PC Magazine, BGR, Re/code, Techdirt, It's a Gadget, TechCrunch, TechCrunch, Techvibes Global News, Gizmodo UK, Daily Dot, Mission Loc@l, US News, Gawker, Gotta Be Mobile, Engadget, ReadWrite, PandoDaily, Gigaom, VentureBeat, The Next Web and VentureBreak

Tweets: @clipperchip, @kallisti, @edbott, @glennf, @mattdpearce, @b_fung, @zeynep, @zeynep, @jimmy_wales, @sacca, @mathewi, @rohit_x_, @ethanklapper, @timkmak, @matthew_d_green, @xor, @tomgara and @passantino

See also Mediagazer

CloudFlare:

Two people independently obtained SSL private keys with Heartbleed exploits, solving CloudFlare's challenge — The Heartbleed Challenge — So far, two people have independently solved the Heartbleed Challenge. The first was submitted at 4:22:01PST by Fedor Indutny (@indutny).

More: Digital Trends, ZDNet, The Verge, Re/code, CloudFlare Blog, Softpedia News, Engadget, The Register, The Next Web, Wall Street Journal, PandoDaily, Schneier on Security and Techie Buzz

Tweets: @eastdakota, @indutny, @mikko, @davidu, @eff, @grittygrease, @timbray and @dinodaizovi

IC ON THE RECORD:

NSA and Federal government claim that they were not aware of Heartbleed vulnerability before April 2014 — Statement on Bloomberg News story that NSA knew about the “Heartbleed bug” flaw and regularly used it to gather critical intelligence — April 11, 2014

More: NBC News, SlashGear, Business Insider, Digital Trends, Re/code and Forbes

Tweets: @dannyyadron, @declanm, @csoghoian, @declanm, @timbray, @eff, @csoghoian, @thegrugq, @ioerror, @alex, @nsa_pao, @kashhill and @astepanovich

Paul Mutton / Netcraft:

Only 30K of the 500K+ SSL certificates affected by the Heartbleed bug have been reissued to date — Heartbleed certificate revocation tsunami yet to arrive — Only 30,000 of the 500,000+ SSL certificates affected by the Heartbleed bug have been reissued up until today, and even fewer certificates have been revoked.

More: Softpedia News, ZDNet, Bloomberg, SocialTimes and Federal Computer Week

Tweets: @latentexistence and @netcraft

Boris Jabes / Meldium:

Agents that fetch URLs are vulnerable to “reverse” Heartbleed exploits, warns Meldium dev team

More: Computerworld, Crowdfund Insider, The PhoneBoy Blog, Security Watch, Global Nerdy, Daily Dot, InfoWorld, Shopify Blog, Freedom to Tinker, Nextgov, Forbes and ReadWrite

Tweets: @thomasfuchs and @jcoglan

Wall Street Journal:

Amazon plans to announce a smartphone by the end of June, to ship by the end of September — Amazon Preparing to Release Smartphone — Retailer Has Plans to Announce Phone in June, Begin Shipping By End of September — Amazon.com Inc. is preparing to release a smartphone in the second half …

Re/code:

Amazon is wooing app developers for upcoming smartphone with money, Amazon Web Services, more — Amazon's Hard Sell: Gaining Developers for Its Coming Smartphones — As Amazon prepares for the launch of its first smartphones, the company faces a daunting task: Ensuring that the devices …

More: NEWS.com.au, Gigaom Research, Computerworld, TechSpot, Softpedia News and iDownloadBlog.com

The Boston Globe:

Massachusetts governor unveils sweeping legislation to eliminate noncompetes for tech workers — Patrick looks to eliminate tech noncompete agreements — Governor Deval Patrick on Thursday will propose sweeping legislation to make it easier for workers in technology, life sciences …

More: BostInno, Bijan Sabet, BetaBoston, Gigaom, VentureBeat and Feld Thoughts

Tweets: @cdixon, @hackerchick, @masseohed, @dittycheria and @danprimack

Yoree Koh / Wall Street Journal:

Report: 44% of Twitter Accounts Have Never Sent a Tweet — Twitter is having no trouble signing up users. But some new research provides an update on the size of an ongoing problem: getting people to tweet. — A report from Twopcharts, a website that monitors Twitter account activity …

More: Business Insider, Mashable, Forbes, Gigaom, TechSpot, Digital Trends, Business 2 Community, InvestorPlace and Consumerist

Tweets: @wsj, @bgurley and @wsjeurope

Mary Jo Foley / ZDNet:

Microsoft experiments with making Windows Live Tiles interactive — Summary: Microsoft researchers are looking at ways to allow Windows 8, Windows Phone and Xbox users able to interact directly with Live Tiles. — Microsoft researchers in Asia are experimenting with the usefulness …

More: TechnoBuffalo, Softpedia News, Engadget, SlashGear, The Verge, PC World and Windows Phone Central

Joe Mullin / Ars Technica:

Another SF protest at the home of a Googler targets lawyer accused of evicting families — SF housing protests get personal as another Googler is confronted at home — There's an undeniable second boom underway in the tech sector, and the consequences, both positive and negative …

More: Mission Loc@l, The Technology Chronicles, Valleywag, sfbg.com, PandoDaily, Re/code, San Francisco Examiner …, SFist, Salon and Globe and Mail

Drew Houston / The Dropbox Blog:

Dropbox responds to uproar over Condoleezza Rice: our commitment to your rights and privacy will continue — Our commitment to your rights and privacy — There's nothing more important to us than keeping your stuff safe and secure. It's why we've been fighting for transparency …

More: PandoDaily, The Verge, The Next Web, Los Angeles Times, The Register, Computerworld, ZDNet, Neowin, Forbes, Business Insider, SiliconBeat, VentureBeat, TechCrunch, emptywheel and PC World

Tweets: @dropdropboxnow, @ia, @latentexistence and @emptywheel

Kevin C. Tofel / Gigaom:

PayPal releases mobile payment app for the Samsung Galaxy S5 fingerprint reader — With the Samsung Galaxy S5 now available, PayPal is making good on its promise to use the handset's fingerprint reader. The company released mobile apps specifically for the Galaxy S5 and Samsung's latest wearables on Friday.

More: PayPal Forward, TechCrunch, Softpedia News, PC Magazine, SlashGear and SamMobile

Sponsor Posts

Subquadratic:

Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens.

Cloudflare:

Cloudflare Connect 2026: The Agentic Conference — Stop preparing for agents. Start running them. 100+ sessions, workshops, and speakers from OpenAI, Arm, and Cloudflare across AI, security, and performance.

Zoho:

Introducing Zoho AgentInbox: Email infrastructure built for AI agents — Most AI agents doing real work eventually need to send or receive email. The default move is to hand them access to someone's existing inbox …

IDrive:

Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Sponsor Techmeme

Featured Podcasts

Channels with Peter Kafka:

Meta's New $1300 Glasses and the Fight to Control AI

Media and tech aren't just intersecting - they're fully intertwined. To understand how those worlds work, Peter Kafka talks to industry leaders, upstarts and observers.

Subscribe to Channels with Peter Kafka.

Great Chat:

Doomers at Dreamforce

A podcast mostly about tech. Brought to you weekly by Angela Du, Sally Shin, Mac Bohannon, Helen Min, and Ashley Mayer.

Subscribe to Great Chat.

Big Technology Podcast:

YouTube CEO Neal Mohan: Why We're Betting On AI And Not Afraid Of It

The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.

Subscribe to Big Technology Podcast.

Sources:

Marc Benioff on the AI boom, SaaSpocalypse, and future of Slack

Candid conversations with the leaders shaping what's next in AI and the broader tech industry. Hosted by Alex Heath, who has covered Silicon Valley for more than a decade.

Subscribe to Sources.

Invest Like the Best:

Gabe Stengel - Building Investing Superintelligence

The leading destination to learn about business and investing. We do this by showcasing exceptional talent and ideas.

Subscribe to Invest Like the Best.

Grit:

Inside the AI Startup Making Customer Support 65% Cheaper

Grit explores what it takes to create, build and scale world-class organizations.

Subscribe to Grit.

Add your podcast here

About This Page

This is a Techmeme archive page. It shows how the site appeared at 11:30 AM ET, April 12, 2014.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.