Techmeme: Two people independently obtained SSL private keys with Heartbleed exploits, solving CloudFlare's challenge (CloudFlare)

Open Links In New Tab

Mobile Archives Advertise Site News Contact Editors

April 12, 2014, 11:30 AM

Top News

Michael Riley / Bloomberg:

NSA Said to Exploit Heartbleed Bug for Intelligence for Years — The U.S. National Security Agency knew for at least two years about a flaw in the way that many websites send sensitive information, now dubbed the Heartbleed bug, and regularly used it to gather critical intelligence, two people familiar with the matter said.

More: USA Today, Guardian, The Verge, NPR, Electronista, Computerworld, The Daily Caller, Salon, I4U News, TechnoBuffalo, Business Insider, Ubergizmo, The Mac Observer, Network World, SecurityWeek, Ars Technica, Slate, Wired, Los Angeles Times, Washington Post, Wall Street Journal, TIME, Mashable, BGR, The Register, BuzzFeed, Errata Security, Politico, SlashGear, Nextgov, PC Magazine, BGR, Re/code, Techdirt, It's a Gadget, TechCrunch, TechCrunch, Techvibes Global News, Gizmodo UK, Daily Dot, Mission Loc@l, US News, Gawker, Gotta Be Mobile, Engadget, ReadWrite, PandoDaily, Gigaom, VentureBeat, The Next Web and VentureBreak

Tweets: @clipperchip, @kallisti, @edbott, @glennf, @mattdpearce, @b_fung, @zeynep, @zeynep, @jimmy_wales, @sacca, @mathewi, @rohit_x_, @ethanklapper, @timkmak, @matthew_d_green, @xor, @tomgara and @passantino

See also Mediagazer

CloudFlare:

Two people independently obtained SSL private keys with Heartbleed exploits, solving CloudFlare's challenge — The Heartbleed Challenge — So far, two people have independently solved the Heartbleed Challenge. The first was submitted at 4:22:01PST by Fedor Indutny (@indutny).

More: Digital Trends, ZDNet, The Verge, Re/code, CloudFlare Blog, Softpedia News, Engadget, The Register, The Next Web, Wall Street Journal, PandoDaily, Schneier on Security and Techie Buzz

Tweets: @eastdakota, @indutny, @mikko, @davidu, @eff, @grittygrease, @timbray and @dinodaizovi

IC ON THE RECORD:

NSA and Federal government claim that they were not aware of Heartbleed vulnerability before April 2014 — Statement on Bloomberg News story that NSA knew about the “Heartbleed bug” flaw and regularly used it to gather critical intelligence — April 11, 2014

More: NBC News, SlashGear, Business Insider, Digital Trends, Re/code and Forbes

Tweets: @dannyyadron, @declanm, @csoghoian, @declanm, @timbray, @eff, @csoghoian, @thegrugq, @ioerror, @alex, @nsa_pao, @kashhill and @astepanovich

Paul Mutton / Netcraft:

Only 30K of the 500K+ SSL certificates affected by the Heartbleed bug have been reissued to date — Heartbleed certificate revocation tsunami yet to arrive — Only 30,000 of the 500,000+ SSL certificates affected by the Heartbleed bug have been reissued up until today, and even fewer certificates have been revoked.

More: Softpedia News, ZDNet, Bloomberg, SocialTimes and Federal Computer Week

Tweets: @latentexistence and @netcraft

Boris Jabes / Meldium:

Agents that fetch URLs are vulnerable to “reverse” Heartbleed exploits, warns Meldium dev team

More: Computerworld, Crowdfund Insider, The PhoneBoy Blog, Security Watch, Global Nerdy, Daily Dot, InfoWorld, Shopify Blog, Freedom to Tinker, Nextgov, Forbes and ReadWrite

Tweets: @thomasfuchs and @jcoglan

Wall Street Journal:

Amazon plans to announce a smartphone by the end of June, to ship by the end of September — Amazon Preparing to Release Smartphone — Retailer Has Plans to Announce Phone in June, Begin Shipping By End of September — Amazon.com Inc. is preparing to release a smartphone in the second half …

Re/code:

Amazon is wooing app developers for upcoming smartphone with money, Amazon Web Services, more — Amazon's Hard Sell: Gaining Developers for Its Coming Smartphones — As Amazon prepares for the launch of its first smartphones, the company faces a daunting task: Ensuring that the devices …

More: NEWS.com.au, Gigaom Research, Computerworld, TechSpot, Softpedia News and iDownloadBlog.com

The Boston Globe:

Massachusetts governor unveils sweeping legislation to eliminate noncompetes for tech workers — Patrick looks to eliminate tech noncompete agreements — Governor Deval Patrick on Thursday will propose sweeping legislation to make it easier for workers in technology, life sciences …

More: BostInno, Bijan Sabet, BetaBoston, Gigaom, VentureBeat and Feld Thoughts

Tweets: @cdixon, @hackerchick, @masseohed, @dittycheria and @danprimack

Yoree Koh / Wall Street Journal:

Report: 44% of Twitter Accounts Have Never Sent a Tweet — Twitter is having no trouble signing up users. But some new research provides an update on the size of an ongoing problem: getting people to tweet. — A report from Twopcharts, a website that monitors Twitter account activity …

More: Business Insider, Mashable, Forbes, Gigaom, TechSpot, Digital Trends, Business 2 Community, InvestorPlace and Consumerist

Tweets: @wsj, @bgurley and @wsjeurope

Mary Jo Foley / ZDNet:

Microsoft experiments with making Windows Live Tiles interactive — Summary: Microsoft researchers are looking at ways to allow Windows 8, Windows Phone and Xbox users able to interact directly with Live Tiles. — Microsoft researchers in Asia are experimenting with the usefulness …

More: TechnoBuffalo, Softpedia News, Engadget, SlashGear, The Verge, PC World and Windows Phone Central

Joe Mullin / Ars Technica:

Another SF protest at the home of a Googler targets lawyer accused of evicting families — SF housing protests get personal as another Googler is confronted at home — There's an undeniable second boom underway in the tech sector, and the consequences, both positive and negative …

More: Mission Loc@l, The Technology Chronicles, Valleywag, sfbg.com, PandoDaily, Re/code, San Francisco Examiner …, SFist, Salon and Globe and Mail

Drew Houston / The Dropbox Blog:

Dropbox responds to uproar over Condoleezza Rice: our commitment to your rights and privacy will continue — Our commitment to your rights and privacy — There's nothing more important to us than keeping your stuff safe and secure. It's why we've been fighting for transparency …

More: PandoDaily, The Verge, The Next Web, Los Angeles Times, The Register, Computerworld, ZDNet, Neowin, Forbes, Business Insider, SiliconBeat, VentureBeat, TechCrunch, emptywheel and PC World

Tweets: @dropdropboxnow, @ia, @latentexistence and @emptywheel

Kevin C. Tofel / Gigaom:

PayPal releases mobile payment app for the Samsung Galaxy S5 fingerprint reader — With the Samsung Galaxy S5 now available, PayPal is making good on its promise to use the handset's fingerprint reader. The company released mobile apps specifically for the Galaxy S5 and Samsung's latest wearables on Friday.

More: PayPal Forward, TechCrunch, Softpedia News, PC Magazine, SlashGear and SamMobile

Sponsor Posts

Subquadratic:

Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens.

Cape:

Most carriers track everything. Cape doesn't. — Unlimited talk, text & data, 24-hr metadata deletion, network ID rotation, SIM-attack defense, and more. Switch today and get 29% off for life.

Zoho:

Introducing Zoho Expense MCP: Turn conversations into expense workflows — Artificial intelligence (AI) has already changed how we search for information, summarize documents, and analyze data.

IDrive:

Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Sponsor Techmeme

Featured Podcasts

Lenny's Podcast:

The playbook for building high talent density teams | Adam Ward, Head of Talent at Cursor

Interviews with world-class product leaders and growth experts to uncover actionable advice to help you build, launch, and grow your own product.

Subscribe to Lenny's Podcast.

Big Technology Podcast:

Demis Steps Down, Apple's Memory Problem, Microsoft's Clever Trick

The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.

Subscribe to Big Technology Podcast.

Hard Fork:

The White House's Secret A.I. Rules + The State of Model Alignment With METR's Chris Painter + The Final Hot Mess Express

The future is already here. Each week, journalists Kevin Roose and Casey Newton explore and make sense of the latest in the rapidly changing world of tech.

Subscribe to Hard Fork.

Channels with Peter Kafka:

Oliver Darcy on Status, Bari Weiss, and Why Media Reporters Are Too Soft

Media and tech aren't just intersecting - they're fully intertwined. To understand how those worlds work, Peter Kafka talks to industry leaders, upstarts and observers.

Subscribe to Channels with Peter Kafka.

Tools and Weapons with Brad Smith:

Connecting the Unconnected: Doreen Bogdan-Martin

Microsoft Vice Chair and President Brad Smith speaks with leaders in government, business, and culture to explore the most critical challenges at the intersection of technology and society.

Subscribe to Tools and Weapons with Brad Smith.

Add your podcast here

About This Page

This is a Techmeme archive page. It shows how the site appeared at 11:30 AM ET, April 12, 2014.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.