ABCDEFGHIJKLMNOPQRSTUVWXYZ
1
TITLE: SSL Flatlines With Heartbleed * 981GUEST CO-ANCHOR: Natali Morris
2
This is Tech News Today for Tuesday, April 8, 2014!
3
This episode of Tech News Today is brought to you by ShareFile. Enhance your workflow - send files of almost any size easily and securely with ShareFile, by Citrix. Try ShareFile today! For a 30 Day Free Trial, go to ShareFile.com, click the microphone and enter TNT!
4
And by...Squarespace, the all-in-one platform that makes it fast and easy to create your own professional website or online portfolio. For a free 2 week trial and 10% off, go to squarespace.com, and use offer code TNT
5
Welcome to Tech News Today, I'm Mike Elgan - I'm Jason Howell.
6
Tech News Today explores the big stories of the day in conversation with some of the world's best journalists.
7
Our guest co-anchor this week is Natali Morris, a contributor to NBC and cofounder of ReadQuick, a speed reading app for iOS.Natali Morris
Contributor, NBC, CBS, CNBC @natalimorris
8
XPocalypse Now - Support for Windows XP ends todayhttp://bridgeurl.com/tnt981/all
9
LATE-BREAKING STORYSHOWLINKS
10
A widely distributed flaw in OpenSSL called “Heartbleed” potentially exposes millions of users to being monitored as they interact with web sites. http://heartbleed.com/http://news.netcraft.com/archives/2014/04/08/half-a-million-widely-trusted-websites-vulnerable-to-heartbleed-bug.html
https://www.ssllabs.com/
11
Joining us to explain it all is Steve Gibson, a security researcher, founder of Gibson Research Corporation and co-host of TWiT’s Security Now.

Q: First of all, can you tell us what OpenSSL is and how widely it’s deployed.

Q: So what is Heartbleed? 		Steve Gibson
Founder, Gibson Research Corporation @SGgrc
12
* several versions of OpenSSL, a cryptographic library that enables SSL (Secure Sockets Layer) or TLS (Transport Security Layer) encryption.

Most websites use either SSL or TLS, which is indicated in browsers with a padlock symbol.

* flaw introduced December 2011

* Fixed in OpenSSL 1.0.1g, released on Monday

* If exploited, the flaw could allow attackers to monitor all information passed between a user and a Web service or even decrypt past traffic they’ve collected.

* “This allows attackers to eavesdrop communications, steal data directly from the services and users and to impersonate services and users,” the researchers wrote.

* The bug found by Codenomicon, a computer security company, and Neel Mehta, who works on security for Google.

* The scope of the problem is vast, as many modern operating systems are suspected as having an affected OpenSSL version.

* Operating systems that may have a vulnerable version of OpenSSL include Debian Wheezy, Ubuntu 12.04.4 LTS, CentOS 6.5, Fedora 18, OpenBSD 5.3, FreeBSD 8.4, NetBSD 5.0.2 and OpenSUSE 12.2, they wrote.

* The “oldstable” versions of Debian Squeeze and Suse Linux Enterprise Server are not vulnerable.

* allows attackers to obtain the private keys used to encrypt traffic

* attackers can only access 64K of memory during one iteration of the attack, but the attackers can “keep reconnecting or during an active TLS connection keep requesting arbitrary number of 64 kilobyte chunks of memory content until enough secrets are revealed
13
Steve * grc.com * @SGgrc

14
CONVERSATION 1SHOWLINKS
15
An Indian startup called Ineda Systems has developed a chip for wearable computers that can run for 30 days without recharging. The company emerged from stealth mode today. And they’ve got some big backers, including Samsung and Qualcomm. http://blogs.wsj.com/digits/2014/04/08/wearable-chip-maker-emerges-in-india-with-big-backers/
16
Don Clark
Technology writer, The Wall Street Journal

Q: Can you tell us about Ineda Systems? 		Don Clark
Technology writer, The Wall Street Journal
17
* Called the Dhanush

* Ineda: Dhanush

* or smartphones, enabling 30 days of always-on battery life.

* The Dhanush will come in four tiers, from the “Nano” to the “Advanced,” customized for simple fitness trackers up to high-end smart watches.

* Hyderabad in India; more than 180 engineers.

* chairman is Sanjay Jha, who led Motorola Mobility until its sale to Google; worked at Qualcomm

* Chips will operate up to 30 days without a charge in an always-on mode

* Ineda stresses a “hierarchical” computing architecture

Ineda’s chips = three different classes of cores. One extremely low-power block of circuitry remains on and exists mainly to talk to sensing devices, which will signal when to wake other parts of the chip up. Another core is designed to run simple apps and the third is a full-on application processor, able to run mobile-style apps, the company says.		http://stpaulsice.com/wp-content/uploads/2014/01/sj.bmp
18
Don * wsj.com * @donal888
19
Sujit * timesofindia.indiatimes.com * @sujitjohn
20
AD 1: ShareFilehttp://sharefile.com
21
22
CONVERSATION 2SHOWLINKS
23
Comcast made its case today for why regulators should let the company buy Time Warner Cable in a $45 billion transaction. Comcast’s 180-page filing to regulators today said that Time Warner Cable is not a competitor, but that Google, Apple and Facebook are. http://corporate.comcast.com/comcast-voices/comcast-and-time-warner-cable-file-applications-and-public-interest-statement-with-fcchttp://recode.net/2014/04/08/comcast-no-competitive-threats-here-move-along/
24
* Summarized in a blog post by Comcast executive vice president David Cohen

* Mostly about why Comcast isn’t dominant

* Comcast: plenty of local high-speed broadband providers and its merger wouldn’t decrease competition

* Broadband service is sold on a local basis, and there’s plenty of choice

* Comcast blog post: “Netflix now has over 33 million customers in the United States alone, with another 11 million international customers; Google’s video websites now attract over 157 million unique viewers each month who watch nearly 13 billion videos; Apple iTunes viewers purchase over 800,000 TV episodes and over 350,000 movies per day”

* Problem is that customers need Internet connections, and little choice there

* Review of Comcast’s deal is only beginning. Tomorrow, a Senate panel will examine the deal in some detail and provide a sense of whether lawmakers may support it or pressure FCC officials to either reject the deal or impose strict conditions on it.

* Justice Department officials looking at competitive threats

* FCC looking at whether the deal is in the “public interest”
25
Peter * recode.net * @pkafka
26
CONVERSATION 3SHOWLINKS
27
The FTC says a Massachusetts-based website called Jerk.com and its owner, Napster cofounder John Fanning, deceived more than 73 million users by harvesting personal information from their Facebook profiles. http://www.bloomberg.com/news/2014-04-07/jerk-com-napster-co-founder-misused-facebook-profiles-ftc-says.html
28
No Interview
29
* Ranked users as either a “jerk” or “not a jerk.”

* FTC: website falsely claimed that people could pay $30 to revise their online profiles

* FTC: Jerk.com misled people when it claimed the content on Jerk.com had been created by other users of the site, when in fact most of the site’s content was harvested from Facebook.

* many believed that someone they knew had created their Jerk.com profile”; actually info from FB
30
31
CONVERSATION 4SHOWLINKS
32
Six major Hollywood studios are suing Megaupload for copyright violation. http://www.nytimes.com/2014/04/08/business/media/studios-file-new-lawsuit-against-megaupload-and-its-founder.html
33
No Interview
34
* MPAA: Paid users based on how many times the content was downloaded by others – and didn't pay at all until that infringing content was downloaded 10,000 times.

* Six major film studios—Twentieth Century Fox, Disney, Paramount, Universal, Columbia and Warner Bros

* Suit: Megaupload was “encouraging and profiting” from copyright violations

* Kim Dotcom denied similar charges; New Zealand to stand trial over charges of mass copyright infringement.

* Shut down by U.S. regulators in 2012

* Accused of allowing copyright-holders to lose more than $500m in revenue.

* Motion Picture Association of America (MPAA): because site paid its users to upload TV and movies, it was not just a file-sharing site

MPAA: Not “a cloud storage service at all, it was an unlawful hub for mass distribution”
35
36
CONVERSATION 5SHOWLINKS
37
Netflix started streaming 4K TV today. The second season of House of Cards and some nature documentaries are available in 4K/Ultra HD format, and not much else yet. http://www.cnet.com/news/netflix-begins-4k-streams/
38
No Interview
39
* The bitrate is just 15 Mbps -- picture superior to the HD movies you can stream from Netflix, but it's inferior to less compressed approaches to 4K.
* Even some Blu-ray movies will probably look better.
* 4K streams from Amazon, Comcast, Fox and others this year
40
41
CONVERSATION 6SHOWLINKS
42
News
43
No Interview
44
Notes
45
46
CONVERSATION 7SHOWLINKS
47
News
48
No Interview
49
Notes
50
51
CONVERSATION 8SHOWLINKS
52
News
53
No Interview
54
Notes
55
56
CONVERSATION 9SHOWLINKS
57
News
58
No InterviewURL
59
Notes
60
61
AD 2: SquareSpacehttp://squarespace.com
62
63
E-MAILSHOWLINKS
64
Social or email feedback
65
66
FOLLOW-UP
67
(OPEN LINK) - We told you April 3 about ZunZuneo, a Cuban social network created by the US government. The story was an exclusive by the Associated Press, and they characterized the program as a covert operation designed to undermine the Cuban government and harvest the personal data of Cubans.
Yesterday, the agency responsible for the program, the U.S. Agency for International Development, responded to the article in a blog post, saying the AP story was riddled with inaccuracies and false conclusions. 		http://blog.usaid.gov/2014/04/eight-facts-about-zunzuneo/
68
69
We told you recently about Twitter’s flirtation with a redesign that would make it look more like Facebook. Well this morning, they announced it. And the examples they showed look more Facebook like even than the tests.
They also announced that tweets that get more engagement will be larger. You’ll be able to pin tweets to the top of your page, filter tweets and have other custom viewing options.
The new profile setup is available today to what Twitter says is a small group of users and will be rolled out to all over the next few weeks. 		https://blog.twitter.com/2014/coming-soon-a-whole-new-you-in-your-twitter-profile
70
71
The Chinese government has approved Microsoft's acquisition of Nokia's mobile phone products and services business, erasing the last credible threat to the $7.2 billion deal.
Nokia today repeated its prediction that the deal will close this month. 		http://recode.net/2014/04/08/china-approves-microsofts-nokia-deal-but-expresses-patent-concerns/
72
73
IN OTHER NEWSSHOWLINKS
74
ION
75
76
THANK GUEST CO-ANCHOR
77
78
79
Subscribe to Tech News Today at twit.tv/tnt
80
81
82
83
84
85
Send us an email at tnt@twit.tv
86
Leave us voicemail by calling 260-TNT-show
87
Also: Don’t miss our evening newscast, Tech News Tonight, at 4pm Pacific.
88
* * * FIN * * *
89
90
A software flaw called Heartbleed could expose your web traffic -- even if it's encrypted!
91
Comcast says it's an underdog surrounded by strong competitors like Apple, Google and Facebok and should be allowed to buy Time Warner Cable.
92
And the FTC says the people behind the social site Jerk.com are, well, a bunch of jerks.
93
TEASER4
94
95
* * * END PROMPTER COPY * * *
96
97
98
99
100