Techmeme: Google discloses SSL 3.0 vulnerability POODLE, recommends clients and servers support TLS_FALLBACK_SCSV to prevent protocol downgrade attacks, says Chrome does (Bodo Möller/Google Online Security Blog)

Open Links In New Tab

Mobile Archives Advertise

October 15, 2014, 11:15 AM

Top News

Bodo Möller / Google Online Security Blog:

Google discloses SSL 3.0 vulnerability POODLE, recommends clients and servers support TLS_FALLBACK_SCSV to prevent protocol downgrade attacks, says Chrome does — This POODLE bites: exploiting the SSL 3.0 fallback — Today we are publishing details of a vulnerability in the design of SSL version 3.0.

Adam Langley / ImperialViolet:

POODLE detailed; how to disable SSL 3.0 in Chrome, Firefox; disabling it on servers may break IE6 — POODLE attacks on SSLv3 — My colleague, Bodo Möller, in collaboration with Thai Duong and Krzysztof Kotowicz (also Googlers), just posted details about a padding oracle attack against CBC-mode ciphers in SSLv3.

More: PandoDaily, A Few Thoughts …, Financial Times, Netcraft, DSLreports, Ars Technica, Errata Security, BBC, Guardian, Computerworld, chromium.googlesource.com and BetaNews. Tweets: @passy

Richard Barnes / Mozilla Security Blog:

Firefox will disable SSL 3.0 in version 34, to be released Nov. 25 — The POODLE Attack and the End of SSL 3.0 — Summary — SSL version 3.0 is no longer secure. Browsers and websites need to turn off SSLv3 and use more modern security protocols as soon as possible, in order to avoid compromising users' private information.

More: eWeek, Gizmodo, Reuters, MARC, BetaNews, addons.mozilla.org, VentureBeat, Electronista, Neowin, Fedora Magazine, Gigaom and bit-tech.net

Brad Molen / Engadget:

Samsung Galaxy Note 4 review: the best big-screen phone you can buy right now — What began in 2011 as a brand-new phone category has flourished into one of the most popular in the world. Smartphones with big screens (phablets, to some) are now ubiquitous, but it all started with an odd device called the Samsung Galaxy Note.

More: BGR, Re/code, Laptop Mag, The Verge, Gizmodo, CNNMoney.com, Ars Technica, PC World, New York Times, The Next Web, Android Police, Gigaom, ZDNet, VentureBeat, Business Insider, AnandTech, DailyTech, Wall Street Journal and SlashGear

Brian Barrett / Gizmodo:

Leaked: Fitbit Charge, like Force but without nickel, and Charge HD with heart rate monitoring — Exclusive: Fitbit Charge and Charge HR Images and Full Features List — After earlier reports that Fitbit may be working on two new activity trackers, a tipster has sent us what appears …

More: ITworld.com, SmarterWatching, Engadget, TechnoBuffalo, Wearable Tech Insider, Wearables Arena, stuff.tv, App Advice, Connectedly, Electronista, Business Insider, The Verge and SlashGear

Peter Kafka / Re/code:

HBO Says Web Subscriptions Coming in 2015 — HBO says it's finally ready: Sometime in the next year the pay TV service will be selling a Web-only offering. — HBO CEO Richard Plepler, speaking at an investor presentation hosted by HBO parent company Time Warner, said the company …

More: BGR, Gizmodo, The Verge and VentureBeat

Tweets: @mathewi, @geoffreyfowler, @pkafka, @pkafka, @pkafka, @pkafka, @pkafka, @pkafka and @pkafka

See also Mediagazer

Dean Takahashi / VentureBeat:

Qualcomm buys Bluetooth and GPS chip maker CSR for $2.5B — Qualcomm announced that it has agreed to acquire chip maker CSR for $2.5 billion in cash as part of its continuing strategy to dominate the electronics in mobile devices. — San Diego, Calif.-based Qualcomm will add a wide variety …

More: The Register, PC World, Fortune, Bloomberg, Inquirer, New York Times, Gigaom, Reuters, TechCrunch, Wall Street Journal and socalTECH.com

Kyle Wagner / Deadspin:

The Future Of The Culture Wars Is Here, And It's Gamergate — Over the weekend, a game developer in Boston named Brianna Wu fled her home after an online stalker vowed to rape and kill her. She isn't the first woman who's been forced into hiding by aggrieved video game fans associated with Gamergate …

More: Utah State Today, Standard-Examiner, Kotaku, BBC, Ars Technica, The Verge, Washington Post, CNET, Engadget, Raw Story, Forbes, we hunted the mammoth, Electronista, destructoid, GamesIndustry.biz, Naked Security, Techly and TIME

Tweets: @nataliezed, @smc90, @rachelrosenfelt, @mattzollerseitz, @soniasaraiya and @glennf

Rob Hayes / abc7.com:

Disney Accelerator program invests in 10 tech startups — Ten companies, 15 weeks and $120,000. Three components of Disney Accelerator, a mentorship and investment program designed for tech startups with a focus on media and entertainment. — The program brings together ten companies for 15 weeks to incubate their ideas.

More: Mashable, socalTECH.com, EdSurge and LaughingPlace.com

Michael Brown / PC World:

Sonos Boost, a high-power signal amplifier, now available for $99 — Sonos Boost promises to eliminate network dead spots on a Sonos network — If you own a Sonos multi-room audio system but have trouble with dead spots, Sonos has good news for you: The all-new Sonos Boost …

More: TechCrunch, 9to5Mac, TechRadar.com, SlashGear, Digital Trends and AndroidHeadlines.com

Husain Sumra / MacRumors:

Initial iPad Air 2 Supplies May Be Limited, 27-Inch Retina Display iMac Launching by End of 2014 — Just about a day before Apple's October 16 media event, KGI Securities analyst Ming-Chi Kuo has issued a new report, saying that he expects supplies of iPad Air 2s to be constrained.

More: 9to5Mac, BGR, Business Insider, iPhone in Canada Blog, Gotta Be Mobile, Gotta Be Mobile, Geeky Gadgets, iDownloadBlog.com and App Advice

Dave Smith / Business Insider:

How Seth Weintraub, an IT professional, started one of the biggest Apple news blogs, 9to5Mac — How An IT Guy Stranded In Paris Turned Himself Into The Most Powerful Source Of Apple News — There's one website that breaks more Apple news than any other — 9to5Mac.

More: Nieman Lab. Tweets: @jyarow, @redletterdave and @markgurman. Thanks:@redletterdave

Robin Wauters / Tech.eu:

Polish startup Brainly raises $9m to make a major push into the US with its social learning platform — Brainly, the Polish edtech startup that we recently paid a visit, has closed a $9 million round from lead General Catalyst Partners, Point Nine Capital and Runa Capital.

More: TechCrunch, Re/code and PE Hub Blog

Dean Takahashi / VentureBeat:

Asus' PadFone X mini $200 phone-tablet hybrid with Intel processor coming to AT&T on Oct 24th — Intel finally gets a break with big smartphone chip customer Asus — Above: Asus smartphone with Intel chips — Intel finally has a big customer for its smartphone chips.

More: Intel Newsroom, Android Police, The Verge, Electronista, Android and Me, IntoMobile, Android Central, SlashGear, Geeky Gadgets, PC World, Geeky Gadgets, Gizmodo, Wall Street Journal, Gigaom, Engadget and CNET

Danielle Friedman / NBC News:

Facebook and Apple to cover up to $20K in egg-freezing treatments for female employees — Facebook and Apple Now Pay for Women to Freeze Eggs — While techniques and success rates are improving, there's no guarantee the procedure will lead to a baby down the road.

Matt Brian / Engadget:

Amazon UK launches free same-day collection for Prime members — In a bid to deal another blow to bricks-and-mortar stores in the UK, Amazon is branching out into same-day deliveries. It's teamed up with newspaper distributor Connect Group to launch “Pass My Parcel,” which will ensure packages …

More: Thomson IR, VentureBeat, SlashGear, Electronista, Geeky Gadgets, CrackBerry.com, The Next Web and Geeky Gadgets

Dawn Chmielewski / Re/code:

Apple Asks Court's Permission to Challenge GT Bankruptcy — In Secret — Apple is seeking court permission to lodge its objections to GT Advanced Technologies' bankruptcy filing in secret, to protect details of its confidential agreements with its would-be supplier of sapphire crystal.

More: Ars Technica, Bloomberg, ITProPortal, App Advice, AppleInsider and Business Insider

Daisuke Wakabayashi / Wall Street Journal:

GT Advanced was not meeting Apple's deadlines as early as February; CEO, COO set plans to sell stock shortly after

More: Business Insider, Fortune, Bloomberg, TUAW, MacNN, The Guardian, SlashGear, iPhone in Canada Blog, Electronista, AppleInsider, 9to5Mac, Patently Apple, Cult of Mac, MacRumors and MacDailyNews

Jeremy Kirk / Computerworld:

‘Hurricane Panda’ hackers used Microsoft zero-day — The group, which targets technology infrastructure companies, is believed to be linked to China's government — One of the zero-day flaws patched by Microsoft on Tuesday had been used for some time by a group with suspected Chinese government ties …

More: CrowdStrike Blog, Help Net Security, Infosecurity Magazine, The Register and eWeek

Gertrude Chavez-Dreyfuss / Reuters:

NY state says bitcoin software developers don't need license — (Reuters) - New York will not require digital currency software developers to obtain a “BitLicense” to operate in the state, said Benjamin Lawksy, superintendent of financial services for the state of New York, on Tuesday.

More: CoinDesk, ZDNet, CryptoCoinsNews, Inside Bitcoins and Wall Street Journal

Sunil Paul / Sidecar:

Sidecar to legally operate at San Francisco Airport, will begin within 30 days — Sidecar and SFO Reach Milestone Agreement — Today, we're proud to announce a milestone agreement with San Francisco International Airport (SFO) that allows Sidecar to legally operate at the airport.

More: Wall Street Journal, VentureBeat, GeekWire, The Next Web, FlySFO, Re/code and Gigaom

Sponsor Posts

TELUS Digital:

See how your customer experience priorities compare — TELUS Digital surveyed leaders about the tech they're investing in, the KPIs they're tracking and their plans for outsourcing. Get the results. No form fill required!

Intel:

Intel Delivers powerful CPUs for AI and Networking — With the onset of AI, businesses demand powerful and efficient CPUs. Explore new Intel Xeon 6 processors, for the broadest set of workloads with leadership performance and lower TCO.

Zoho:

Zoho Sign at Kenya's Digital Trust Forum 2025 organized by Evrotrust and Geda — Kenyan businesses and government services are adapting to digital alternatives to explore opportunities in the nation's newly launched ten-year Digital Master Plan.

IDrive:

Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Box data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Sponsor Techmeme

Featured Podcasts

The Logan Bartlett Show:

Zach Weinberg (Co-Founder & CEO, Curie.Bio) on The Tariff Trap, Self-Inflicted Recession Risk, and Open AI's Fundraise

A podcast hosted by Logan Bartlett, an investor at Redpoint Ventures, covering tech with industry insiders.

Subscribe to The Logan Bartlett Show.

Techmeme Ride Home:

The Nintendo Switch 2

The day's tech news, every day at 5pm ET. Fifteen minutes and you're up to date.

Subscribe to Techmeme Ride Home.

Sponsor this podcast

Channels with Peter Kafka:

Trump vs The Media, Round 2, with Sara Fischer

Media and tech aren't just intersecting - they're fully intertwined. To understand how those worlds work, Peter Kafka talks to industry leaders, upstarts and observers.

Subscribe to Channels with Peter Kafka.

Spotlight On:

Graphite's Merrill Lutsky on Revolutionizing Code Review for the AI Era

A podcast from Accel about how companies are built, from the people doing the building.

Subscribe to Spotlight On.

Invest Like the Best:

Darren Farber - The Business of Defense

The leading destination to learn about business and investing. We do this by showcasing exceptional talent and ideas.

Subscribe to Invest Like the Best.

Decoder with Nilay Patel:

CEO Matt Bromberg on ending Unity's 'war' against its customers

A show from the Verge about big ideas - and other problems.

Subscribe to Decoder with Nilay Patel.

Add your postcast here

About This Page

This is a Techmeme archive page. It shows how the site appeared at 11:15 AM ET, October 15, 2014.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.