Techmeme: Bash bug as big as Heartbleed (Robert Graham/Errata Security)

Open Links In New Tab

Mobile Archives Advertise

September 25, 2014, 12:15 PM

Top News

Stephen Hall / 9to5Google:

Motorola Shamu (Nexus 6/X): 5.92" screen, 2560 x 1440 QHD resolution, 498 PPI display, 3,200 mAh battery — Exclusive: This is ‘Shamu,’ Motorola's upcoming Nexus 6/X — Yes, it looks like a Moto X. But it has a 5.9-inch screen. And lowered volume/lock buttons.

More: lcamtuf's blog, CNET, Gigaom, The Verge, Gizmodo, TechCrunch, Business Insider, DailyTech, Redmond Pie, TechnoBuffalo, ITProPortal, GadgeTell, Android Police, BGR, Electronista, Channel EYE, Pocketnow, Fudzilla, Digital Trends, Inquirer, Android Authority, Phones Review, SlashGear, Seeking Alpha, Droid Life, MobileSyrup.com, Phone Cruncher, Android Central and Phandroid. Tweets: @dannysullivan. Thanks:@rsgnl

Robert Graham / Errata Security:

Bash bug as big as Heartbleed — Today's bash bug is as big a deal as Heartbleed. That's for many reasons. — The first reason is that the bug interacts with other software in unexpected ways. We know that interacting with the shell is dangerous, but we write code that does it anyway.

Robert Graham / Errata Security:

Bash “shellshock” bug is wormable, a quick scan to uncover vulnerable servers has revealed — Bash ‘shellshock’ bug is wormable — Early results from my scan: there's about 3000 systems vulnerable just on port 80, just on the root “/” URL, without Host field.

More: FierceEnterpriseCommunications …, The Register and bit-tech.net

Liam Tung / ZDNet:

First attacks using Bash bug discovered in the wild, available patch only a partial fix — First attacks using ‘shellshock’ Bash bug discovered — Summary: Security researchers have found the first malware using the new Bash bug. — Liam Tung — Within a day of the Bash bug dubbed 'shellshock …

More: US-CERT, Bloomberg, BBC, Errata Security, Guardian, Graham Cluley and Schneier on Security. Tweets: @yinettesys

Steven J. Vaughan-Nichols / ZDNet:

Critical security hole uncovered in popular Unix/Linux shell Bash, affecting many web apps and servers

Dell Cameron / The Daily Dot:

Developer reported iCloud brute-force password hack to Apple in March 2014, months before Celebgate — Apple knew of iCloud security hole 6 months before Celebgate — Apple knew as early as March 2014 of a security hole that left the personal data of iCloud users vulnerable …

More: PandoDaily, BGR, AppleInsider, Ubergizmo, 9to5Mac, Geeky Gadgets, App Advice, MacRumors, iPhone in Canada Blog, Cult of Mac, Business Insider, Electronista, iLounge, Gizmodo, SlashGear, VentureBeat and Salon. Tweets: @ow

Kurt Wagner / Re/code:

Hootsuite raises $60M at a $1B valuation, acquires Zeetl to integrate voice calls in social media — Hootsuite Reaches $1 Billion Valuation in Latest Funding Round — Hootsuite, the Vancouver-based startup known for its social media management dashboards, has raised $60 million in new venture funding, CEO Ryan Holmes told Re/code.

More: Hootsuite Media, ZDNet, Techvibes Global News, GeekWire, Wall Street Journal, VentureBeat, New York Times, TechCrunch, Fortune, BetaKit, AllTwitter and PE Hub Blog

Kara Swisher / Re/code:

Joe Green Pushed Out at FWD.us — Joe Green, the president of FWD.us, has resigned from the political organization that is backed by a coterie of tech luminaries, most prominently Facebook CEO and co-founder Mark Zuckerberg. — And, according to a “confidential” email that Zuckerberg sent …

More: FWD.us, BuzzFeed, Politico, BREITBART.COM, The Daily Caller and Business Insider

Tweets: @ryangrim and @buzzfeedben

New York Times:

Lenders using tech to track cars of subprime borrowers, disable ignition if payments missed — Miss a Payment? Good Luck Moving That Car — Credit: John Gurzinski for The New York Times — The thermometer showed a 103.5-degree fever, and her 10-year-old's asthma was flaring up.

More: Boing Boing, Digital Trends and Wall Street Journal

Tweets: @katekellycnbc, @keithboykin, @nickbunkley, @zittrain, @nytimesbusiness and @digiphile

NPD Group:

US retail PC sales grew 3% in Back-to-School period led by Macs and Chromebooks, after declining 2.5% last year — Apple and Chrome Boost U.S. Retail PC Back-to-School Sales — U.S. consumer retail PC sales grew almost 3 percent during the 10 week Back-to-School period …

More: AppleInsider, BGR, 9to5Mac, eWeek, BetaNews, iMore, ZDNet, Electronista and TUAW. Tweets: @monkbent

Craig Hockenberry / furbo.org:

Developer warns that in-app browsers can keylog on iOS, recommends Safari for OAuth handshake — In-App Browsers Considered Harmful — How many apps on your iPhone or iPad have a built-in browser? — Would it surprise you to know that every one of those apps could eavesdrop on your typing?

More: TUAW, MacRumors, Cult of Mac, Six Colors, DISPLAYBLOG, Gizmodo, SlashGear, iPhone in Canada Blog, App Advice and 9to5Mac

Tweets: @drbarnard and @chockenberry

Thorsten Von Eicken / RightScale Blog:

AWS to roll out urgent patch, will reboot the vast majority of EC2 instances beginning Sept 26 — AWS to Reboot a Substantial Number of EC2 Instances — Today Amazon Web Services (AWS) notified its customers that it will be rolling out an urgent patch to all hosts causing a maintenance reboot …

More: AWS Discussion Forums, SiliconANGLE, iTnews.com.au, ZDNet, The Register and Gigaom. Tweets: @mathewlodge

Juli Clover / MacRumors:

Apple Says iOS 8.0.2 Update is in the Works, Directs Users to Reinstall iOS 8 — Earlier today, Apple released iOS 8.0.1, which ended up disabling cellular service and Touch ID on many iPhone 6 and 6 Plus devices. Apple said that it was investigating the issue this afternoon …

Chris Welch / The Verge:

Apple pulls iOS 8.0.1 after users report losing cellular connections and problems with Touch ID

Lisa Vaas / Naked Security:

Disgruntled employees are increasingly e-sabotaging businesses, FBI says — Employees with an axe to grind are increasingly sticking it to their current or former employers using e-tools such as cloud storage sites or remote access to a company's computer network, the US Federal Bureau …

More: Internet Crime Complaint …, Help Net Security, The Register, Inquirer, VentureBeat, SC Magazine and SecurityWeek

Foo Yun Chee / Reuters:

Facebook to win EU approval for $19 billion WhatsApp bid: sources — (Reuters) - Facebook (FB.O), the world's leading social network, will win unconditional EU approval for its $19 billion offer for mobile messaging startup WhatsApp in a deal pitting it against telecoms operators, two people familiar with the matter said on Thursday.

More: Globe and Mail, TheStreet.com and Electronista

Sponsor Posts

TELUS Digital:

What you need to know about fine-tuning LLMs — Success with generative AI hinges on honing a pretrained LLM to be a specialist at your intended domain or application. Learn how to fine-tune for four key characteristics.

Intel:

Intel Delivers powerful CPUs for AI and Networking — With the onset of AI, businesses demand powerful and efficient CPUs. Explore new Intel Xeon 6 processors, for the broadest set of workloads with leadership performance and lower TCO.

Zoho:

Planned India Data Center Maintenance on 5th and 6th April 2025 from 09.00 AM to 09:30 AM IST for Zoho Payments — Dear customers,Our bi-annual infrastructure maintenance for our India Data Center is scheduled for April 5 & 6 …

IDrive:

Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Box data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Sponsor Techmeme

Featured Podcasts

Techmeme Ride Home:

(Essay) Silicon Valley's "Sovereign Tech Stack" Problem

The day's tech news, every day at 5pm ET. Fifteen minutes and you're up to date.

Subscribe to Techmeme Ride Home.

Sponsor this podcast

Hard Fork:

The Tech Behind Signalgate + Dwarkesh Patel's "Scaling Era" + Is A.I. Making Our Listeners Dumb?

The future is already here. Each week, journalists Kevin Roose and Casey Newton explore and make sense of the latest in the rapidly changing world of tech.

Subscribe to Hard Fork.

The Logan Bartlett Show:

Aaron Levie (CEO, Box) on Enterprise AI Trends No One is Talking About Yet

A podcast hosted by Logan Bartlett, an investor at Redpoint Ventures, covering tech with industry insiders.

Subscribe to The Logan Bartlett Show.

Great Chat:

Does anyone care about bad behavior anymore?

A podcast mostly about tech. Brought to you weekly by Angela Du, Sally Shin, Mac Bohannon, Helen Min, and Ashley Mayer.

Subscribe to Great Chat.

Decoder with Nilay Patel:

Capitalism vs. the bird flu

A show from the Verge about big ideas - and other problems.

Subscribe to Decoder with Nilay Patel.

Lenny's Podcast:

How to win in the AI era: Ship a feature every week, embrace technical debt, ruthlessly cut scope, and create magic your competitors can't copy | Gaurav Misra (CEO and co-founder of Captions)

Interviews with world-class product leaders and growth experts to uncover actionable advice to help you build, launch, and grow your own product.

Subscribe to Lenny's Podcast.

Add your postcast here

About This Page

This is a Techmeme archive page. It shows how the site appeared at 12:15 PM ET, September 25, 2014.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.