Techmeme: Two people independently obtained SSL private keys with Heartbleed exploits, solving CloudFlare's challenge (CloudFlare)

Open Links In New Tab

Mobile Archives Advertise Site News

April 12, 2014, 11:30 AM

Top News

Michael Riley / Bloomberg:

NSA Said to Exploit Heartbleed Bug for Intelligence for Years — The U.S. National Security Agency knew for at least two years about a flaw in the way that many websites send sensitive information, now dubbed the Heartbleed bug, and regularly used it to gather critical intelligence, two people familiar with the matter said.

More: USA Today, Guardian, The Verge, NPR, Electronista, Computerworld, The Daily Caller, Salon, I4U News, TechnoBuffalo, Business Insider, Ubergizmo, The Mac Observer, Network World, SecurityWeek, Ars Technica, Slate, Wired, Los Angeles Times, Washington Post, Wall Street Journal, TIME, Mashable, BGR, The Register, BuzzFeed, Errata Security, Politico, SlashGear, Nextgov, PC Magazine, BGR, Re/code, Techdirt, It's a Gadget, TechCrunch, TechCrunch, Techvibes Global News, Gizmodo UK, Daily Dot, Mission Loc@l, US News, Gawker, Gotta Be Mobile, Engadget, ReadWrite, PandoDaily, Gigaom, VentureBeat, The Next Web and VentureBreak

Tweets: @clipperchip, @kallisti, @edbott, @glennf, @mattdpearce, @b_fung, @zeynep, @zeynep, @jimmy_wales, @sacca, @mathewi, @rohit_x_, @ethanklapper, @timkmak, @matthew_d_green, @xor, @tomgara and @passantino

See also Mediagazer

CloudFlare:

Two people independently obtained SSL private keys with Heartbleed exploits, solving CloudFlare's challenge — The Heartbleed Challenge — So far, two people have independently solved the Heartbleed Challenge. The first was submitted at 4:22:01PST by Fedor Indutny (@indutny).

More: Digital Trends, ZDNet, The Verge, Re/code, CloudFlare Blog, Softpedia News, Engadget, The Register, The Next Web, Wall Street Journal, PandoDaily, Schneier on Security and Techie Buzz

Tweets: @eastdakota, @indutny, @mikko, @davidu, @eff, @grittygrease, @timbray and @dinodaizovi

IC ON THE RECORD:

NSA and Federal government claim that they were not aware of Heartbleed vulnerability before April 2014 — Statement on Bloomberg News story that NSA knew about the “Heartbleed bug” flaw and regularly used it to gather critical intelligence — April 11, 2014

More: NBC News, SlashGear, Business Insider, Digital Trends, Re/code and Forbes

Tweets: @dannyyadron, @declanm, @csoghoian, @declanm, @timbray, @eff, @csoghoian, @thegrugq, @ioerror, @alex, @nsa_pao, @kashhill and @astepanovich

Paul Mutton / Netcraft:

Only 30K of the 500K+ SSL certificates affected by the Heartbleed bug have been reissued to date — Heartbleed certificate revocation tsunami yet to arrive — Only 30,000 of the 500,000+ SSL certificates affected by the Heartbleed bug have been reissued up until today, and even fewer certificates have been revoked.

More: Softpedia News, ZDNet, Bloomberg, SocialTimes and Federal Computer Week

Tweets: @latentexistence and @netcraft

Boris Jabes / Meldium:

Agents that fetch URLs are vulnerable to “reverse” Heartbleed exploits, warns Meldium dev team

More: Computerworld, Crowdfund Insider, The PhoneBoy Blog, Security Watch, Global Nerdy, Daily Dot, InfoWorld, Shopify Blog, Freedom to Tinker, Nextgov, Forbes and ReadWrite

Tweets: @thomasfuchs and @jcoglan

Wall Street Journal:

Amazon plans to announce a smartphone by the end of June, to ship by the end of September — Amazon Preparing to Release Smartphone — Retailer Has Plans to Announce Phone in June, Begin Shipping By End of September — Amazon.com Inc. is preparing to release a smartphone in the second half …

Re/code:

Amazon is wooing app developers for upcoming smartphone with money, Amazon Web Services, more — Amazon's Hard Sell: Gaining Developers for Its Coming Smartphones — As Amazon prepares for the launch of its first smartphones, the company faces a daunting task: Ensuring that the devices …

More: NEWS.com.au, Gigaom Research, Computerworld, TechSpot, Softpedia News and iDownloadBlog.com

The Boston Globe:

Massachusetts governor unveils sweeping legislation to eliminate noncompetes for tech workers — Patrick looks to eliminate tech noncompete agreements — Governor Deval Patrick on Thursday will propose sweeping legislation to make it easier for workers in technology, life sciences …

More: BostInno, Bijan Sabet, BetaBoston, Gigaom, VentureBeat and Feld Thoughts

Tweets: @cdixon, @hackerchick, @masseohed, @dittycheria and @danprimack

Yoree Koh / Wall Street Journal:

Report: 44% of Twitter Accounts Have Never Sent a Tweet — Twitter is having no trouble signing up users. But some new research provides an update on the size of an ongoing problem: getting people to tweet. — A report from Twopcharts, a website that monitors Twitter account activity …

More: Business Insider, Mashable, Forbes, Gigaom, TechSpot, Digital Trends, Business 2 Community, InvestorPlace and Consumerist

Tweets: @wsj, @bgurley and @wsjeurope

Mary Jo Foley / ZDNet:

Microsoft experiments with making Windows Live Tiles interactive — Summary: Microsoft researchers are looking at ways to allow Windows 8, Windows Phone and Xbox users able to interact directly with Live Tiles. — Microsoft researchers in Asia are experimenting with the usefulness …

More: TechnoBuffalo, Softpedia News, Engadget, SlashGear, The Verge, PC World and Windows Phone Central

Joe Mullin / Ars Technica:

Another SF protest at the home of a Googler targets lawyer accused of evicting families — SF housing protests get personal as another Googler is confronted at home — There's an undeniable second boom underway in the tech sector, and the consequences, both positive and negative …

More: Mission Loc@l, The Technology Chronicles, Valleywag, sfbg.com, PandoDaily, Re/code, San Francisco Examiner …, SFist, Salon and Globe and Mail

Drew Houston / The Dropbox Blog:

Dropbox responds to uproar over Condoleezza Rice: our commitment to your rights and privacy will continue — Our commitment to your rights and privacy — There's nothing more important to us than keeping your stuff safe and secure. It's why we've been fighting for transparency …

More: PandoDaily, The Verge, The Next Web, Los Angeles Times, The Register, Computerworld, ZDNet, Neowin, Forbes, Business Insider, SiliconBeat, VentureBeat, TechCrunch, emptywheel and PC World

Tweets: @dropdropboxnow, @ia, @latentexistence and @emptywheel

Kevin C. Tofel / Gigaom:

PayPal releases mobile payment app for the Samsung Galaxy S5 fingerprint reader — With the Samsung Galaxy S5 now available, PayPal is making good on its promise to use the handset's fingerprint reader. The company released mobile apps specifically for the Galaxy S5 and Samsung's latest wearables on Friday.

More: PayPal Forward, TechCrunch, Softpedia News, PC Magazine, SlashGear and SamMobile

Sponsor Posts

Soxton:

Fast, affordable law for startups — Soxton automates startup legal so founders can move faster and sleep better. We handle incorporation, advisor, employment and commercial contracts. Join the waitlist for early access!

F5:

Accelerate AI Adoption at F5's AI Virtual Summit — Learn how to architect, secure, and scale AI for production with real-world insights from industry leaders on June 23. Register now to save your spot.

Zoho:

Say hello to Zia Answer Bot: Your organization's knowledge, on-demand in every Zoho Lens session. — Imagine your technician is halfway through a live remote assistance session.

IDrive:

Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Sponsor Techmeme

Featured Podcasts

Lenny's Podcast:

Building the most AI-pilled engineering team in the world | Fiona Fung (Manager of the Claude Code and Cowork Teams)

Interviews with world-class product leaders and growth experts to uncover actionable advice to help you build, launch, and grow your own product.

Subscribe to Lenny's Podcast.

Big Technology Podcast:

Are AI Glasses Over?, Big Technology Audience Questions, Alex Stamos on AI Cybersecurity

The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.

Subscribe to Big Technology Podcast.

The Upstarts Podcast:

Mutiny's Jaleh Rezaei: Walking Away From Millions In Software To Grow Even Faster With Sales AI

Veteran tech reporter Alex Konrad sits down with breakout entrepreneurs taking on the status quo to shake up their fields in AI, design, nuclear energy, space, and more.

Subscribe to The Upstarts Podcast.

Hard Fork:

'Hard Fork' Live, Part 3: Differing Visions of an A.I. Future

The future is already here. Each week, journalists Kevin Roose and Casey Newton explore and make sense of the latest in the rapidly changing world of tech.

Subscribe to Hard Fork.

Access:

The billionaire paying AI researchers to stay out of Big Tech

A show about the tech industry's inside conversation, hosted by tech reporter Alex Heath and founder whisperer Ellis Hamburger.

Subscribe to Access.

Tools and Weapons with Brad Smith:

AI's Mythos Moment: Rishi Sunak on preparing governments for AI

Microsoft Vice Chair and President Brad Smith speaks with leaders in government, business, and culture to explore the most critical challenges at the intersection of technology and society.

Subscribe to Tools and Weapons with Brad Smith.

Add your podcast here

About This Page

This is a Techmeme archive page. It shows how the site appeared at 11:30 AM ET, April 12, 2014.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.