.

TITLE: NSA: Nothing Short of Awesome

.

Can NSA break SSL and VPN? PayPal lets you dine, dash, and pay, Why Android is winning in China. http://live.twit.tv/GUEST: Darren Kitchen
LOWER THIRD URL: hak5.org

.

GUEST: Len Peralta, Internet cartoonist
LOWER THIRD URL: lenperalta.com

.

SEGMENT GUEST: Steve Gibson, Host, Security Now
LOWER THIRD URL: twit.tv/sn

.

Today's date

.

This is 'Tech News Today' for Wednesday April 23 2014

.

Tech News Today is brought to you by

proXPN (pro X-P-N). proXPN is a virtual private network that allows you to use the internet the way it should be: anonymously and without oversight! For 20% off your new account, go to proxpn.com/twit and use the code TNT.

.

Welcome to Tech News Today, I'm Tom Merritt --- I'm Sarah Lane --- I'm Iyaz Akhtar -- I'm Jason Howell

.

We'll keep you up to date on the most important stories in the tech world, and put them in context for you.

.

We start with the top 10 stories of the day in the News Fuse

.

http://bridgeurl.com/tnt834/all

.

News Fuse - Top 10VIDEO

.

tmThe New York Times, ProPublica and The Guardian have reports based on documents leaked by Edward Snowden implying the NSA has the ability to break encryption on SSL, TLS and VPN. Security experts like Bruce Schneier say it's possible the NSA has the ability to break some encryption not known about in the academic community but longer keys, like 2048-bit or 3072-bit RSA keys, would probably thwart it. Snowden himself said in an interview in June that, "properly implemented strong crypto systems are one of the few things you can rely on."

http://www.nytimes.com/2013/09/06/us/nsa-foils-much-internet-encryption.html?pagewanted=all&_r=0

.

slA promotional video for Android KitKat earlier this week may have shown off a little hint about Google's next Nexus device. Today, a filing from the FCC detailing a new, unreleased LG device shows off possibly more. The Nexus 5 could be the “D820″ from the filing:the images shared with the FCC line up closely with the sneak peek revealed in Google’s video, it contains wireless charging based on the Qi standard, a feature of the LG Nexus 4. And per the filing, this supposed Nexus 5 would offer 7-band LTE, 802.11ac Wi-Fi networking, a 5-inch display, and come with Android 4.4 preloaded.http://techcrunch.com/2013/09/06/nexus-5-could-get-lte-5-inch-display-and-snapdragon-800-processor-per-fcc-filing-for-new-lg-device/

.

iaAn Apple announcement is scheduled for next week, so let's pile in as many Apple rumors as possible. According to the WSJ, Apple is currently testing iPhones with screen sizes of 4.8-inches up to 6-inches. Those giganto models are not the ones expected next week. Additionally, 9to5Mac reports that the next version of OS X, Mavericks, will be released at the end of October. There's even murmurs that iPad version of iOS 7 may be pushed back until October. In a strange twist, Apple has confirmed all of these reports as true. Nah, they didn't say that. That was just a rumor.http://news.cnet.com/8301-13579_3-57601591-37/apple-testing-6-inch-iphone-models-new-report-claims/

.

Apple’s OS X Mavericks release planned for end of Octoberhttp://9to5mac.com/2013/09/06/apples-os-x-mavericks-release-planned-for-end-of-october/

.

tmTwitter user @levleaks shows pictures supposed to be the new Lumia 1520 Windows Phone. The phone shows a device very similar to previous Lumias, including a camera at the rear and a slight hump like the 925. The device is expected to have a 6-inch 1080p display. The Verge reported earlier this month that AT&T is testing the 1520 for a release in the US by the end of the year.http://www.theverge.com/2013/9/6/4700980/nokia-lumia-1520-leaked-photo

.

slFederal judge Denise Cote has issued an injunction against Apple in the case of Apple conspiring with publishers to set ebook prices at the launch of the iBookstore. The injunction, which is set to go into place in 30 days, will last for five years — but the court can extend it for “one or more one-year periods” after that, either on its own or at the request of the DOJ or the states. Apple may seek a stay of the injunction pending its appeal.http://gigaom.com/2013/09/06/judge-lays-down-apples-punishment-in-ebooks-case-in-line-with-what-the-feds-wanted/

.

iaAn Apple announcement is scheduled for next week, so let's pile in some more Apple news. The WSJ reports that a verified China Telecom account on Weibo posted an advertisement showing off the iPhone 5S and 5C. The post was taken down, but because this is the internet, there are tons of screenshots of the post floating around the web. The post said that China would be one of the first markets to get the new iPhones. That would be an unusual move for Apple since China normally had to wait months before getting the previous versions of the iPhones. http://blogs.wsj.com/chinarealtime/2013/09/06/apples-new-iphone-coming-to-china-soon-china-telecom-post-suggests/

.

tmGoogle rolled out Chrome Apps yesterday. The Chrome browser has had Web apps in a store since 2010, but the new apps work more like native apps you'd find in Windows, OSX or Linux. Among other capabilities, they can work outside the browser window, work offline and sync across platforms. The apps only work in Windows and ChromeOS right now. OSX capability should arrive in 6 weeks. 50 apps can be found in the web store at launch at chrome.google.com.http://www.theverge.com/2013/9/5/4696618/google-chrome-apps-chrome-os-windows-os-x-blink

.

slSalesforce.com has announced the beta launch of Salesforce Files, an upgrade of its ChatterBox file sharing and sync system. Users will gain the ability to use any device to retrieve documents from document management systems such as Documentum, FileNet and SharePoint and file-sharing systems such as Box and Dropbox. Salesforce Files also adds the ability to access third-party repositories and view business-relevant documents needed for projects, collaborations, and to close deals with customers.http://www.informationweek.com/software/enterprise-applications/salesforcecom-shakes-up-file-sharing/240160908

.

tmMaxthon announced a partnership with MediaTek's Rolltech to bundle Maxthon's Chromium based mobile browsers onto chips used in Android smartphones mostly in emerging markets. That means in 2014 100 million smartphones and tablets made by manufacturers like LGE, ZTE, TCL/Alcatel, Gionee, Phillips, Techain, Konka, Lenovo Mobile, CKT and LavaMobile will come with the Maxthon browser preloaded. Mediatek is tht third largest global supplier of chipsets for Android.

http://techcrunch.com/2013/09/06/maxthon-inks-deal-with-mobile-chip-maker-mediatek-that-will-preload-its-browser-onto-100m-mobile-devices-in-2014/

.

iaAn Apple announcement is scheduled for next week, so let's talk about something else. Amazon's Jeff Bezos had his first meeting with Washington Post staffers since buying the newspaper. The staffers took to Twitter to share quotes from Bezos. BusinessInsider highlighed a couple of quotes that show Bezos wants the Post to think of the readers as the number one customer. Being 100% ad-supported leads a business to think the customer is the advertiser. Another Bezos-quote was about innovation. He said the recipe for innovation is "Stubborn on vision, flexible on details." Unfortunately, there were no quotes about Jeff Bezos' recipe for his famous three-alarm chili. That's simply a secret.http://www.businessinsider.com/surprise-jeff-bezos-thinks-ad-supported-businesses-are-bad-for-users-2013-9

.

.

.

.

ADhttp//proxpn.com/twitTNT

.

Introduce GuestGUEST: Darren Kitchen
LOWER THIRD URL: hak5.org

.

Introduce GuestGUEST: Len Peralta, Internet cartoonist
LOWER THIRD URL: lenperalta.com

.

Discussion Stories

.

.

tmN.S.A. Able to Foil Basic Safeguards of Privacy on Webhttp://www.nytimes.com/2013/09/06/us/nsa-foils-much-internet-encryption.html?pagewanted=all&_r=0SEGMENT GUEST: Steve Gibson, Host, Security Now
LOWER THIRD URL: twit.tv/sn

.

U.S. spy network’s successes, failures and objectives detailed in ‘black budget’ summaryhttp://www.washingtonpost.com/world/national-security/black-budget-summary-details-us-spy-networks-successes-failures-and-objectives/2013/08/29/7e57bb78-10ab-11e3-8cdd-bcdc09410972_story.html

.

Let us count the ways: How the feds (legally, technically) get our datahttp://arstechnica.com/tech-policy/2013/09/let-us-count-the-ways-how-the-feds-legally-technically-get-our-data/

.

The NSA's Cryptographic Capabilitieshttps://www.schneier.com/blog/archives/2013/09/the_nsas_crypto_1.html

.

Disagreeing with Bruce Schneier: More Crypto is Not the Answerhttp://continuations.com/post/60444129080/disagreeing-with-bruce-schneier-more-crypto-is-not-the

.

NYTimes, ProPublica, Guardian (Encyprtion) & WaPo report (Budget)
Cyrus Farivar AT: breaks it down well
A company volunteers to help (and gets paid for it) - Telcos like ATT
Spies copy the traffic directly off the fiber
A company complies under legal duress - PRISM?
- Internal database of keys "Key Provisioning Service" and "Key Recovery Service"
Spies infiltrate a company - HumInt
Spies coerce upstream companies to weaken crypto in their products/install backdoors
- NSA introduced weaknesses into NIST standard, discovered by MS researchers 2007
Spies brute force the crypto
- 'intensive efforts' SSL, TLS and VPN, SigInt backdoor in chip-based encryption and exploting flaws.
- "Bullrun" (successor to Manassas) "Edgehill" 3 foreign airlines, 1 travel res., 1 nuclear dept., 1 ISP by craking VPN, Edgehill hacked into VPN for 30 targets
- Snowden wrote, "Encryption works. Properly implemented strong crypto systems are one of the few things that you can rely on. Unfortunately, endpoint security is so terrifically weak that NSA can frequently find ways around it.”
Spies compromise a digital certificate
- Stuxnet
Spies hack a target computer directly, stealing keys and/or data, sabotage.
- Operations Aurora, Shady RAT, or Red October
Schneier: "... the mathematics of cryptography will still be the most secure part of any encryption system. I worry a lot more about poorly designed cryptographic products, software bugs, bad passwords, companies that collaborate with the NSA to leak all or part of the keys, and insecure computers and networks."
- Schneier: NSA pushesw elliptic-curve cryptography, likely they have factoring that can break it more easily than academia knows, the fix? increase key lengths
- Albert Wenger of Union Square Ventures on his Continuations blog disagrees w/Schneier says we need to stop the surveillance not rely on stronger crypto

.

19

.

slRedesigned PayPal app wants you to order ahead, skip lineshttp://news.cnet.com/8301-1035_3-57601306-94/redesigned-paypal-app-wants-you-to-order-ahead-skip-lines/

.

- redesigned mobile payments app with in-store deals, more food spots offering the "order ahead and skip the line" feature, and an experimental function that lets you pay for a restaurant bill without flagging down your server.
- PayPal is connected to your credit cards, which are stored in the "wallet" section of the app. But a new BillMeLater feature may change that in the future. The payment option essentially lets independent merchants offer a line of credit to consumers, without having to strike a deal with a major credit card company first.
- added an integration with Eat24, an order ahead system for food. experimental feature that lets users pay for a meal at the table without having to wait for a server to bring the check. It's available in 65 locations, including City Winery in New York, 21st Amendment Brewery in San Francisco and Peasona in Melbourne, Australia. servers give users a ticket with a printed code at the start of the meal. After entering the code, diners can order from the app, send feedback, and mark favorite items for their next visit. At the end of the meal, they can pay from the app.
q: does bypassing lines give paypal an edge? AIRPLAY FROM IPHONE

.

29

.

iaGoogle's Trojan horse: how Chrome Apps will finally take on Windowshttp://www.theverge.com/2013/9/5/4696618/google-chrome-apps-chrome-os-windows-os-x-blink

.

A new breed of Chrome Appshttp://chrome.blogspot.com/2013/09/a-new-breed-of-chrome-apps.htmlIMAGES

.

Chrome Apps for desktophttps://chrome.google.com/webstore/a/google.com/category/collection/for_your_desktop

.

- Chrome turned 5 so Google introduced Chrome Apps
- Unlike the old Chrome apps that were pretty much glorified bookmarks, the new Chrome apps act more like native desktop apps.
- These new apps will be cross-platform, can work offline and store locally. Additionally, they can access your computer's GPU, camera, ports, and bluetooth connection
- Right now the apps are only available on Windows and Chrome OS. There's even Chrome apps launcher that appears in your toolbar. You can alt + tab between them easily. Mac users get have to wait about six weeks. Linux users will also get the upgrade.
- Chrome syncs your apps to any desktop device you sign in to, so you can keep working.

- The Chrome team told The Verge that its their goal to have Chrome Apps be so polished and so powerful that users can't tell the difference between Chrome Apps and regular Windows apps.
- The Chrome team also said that after the desktop, they want to get Chrome apps to work everywhere where Chrome runs (Android? iOS?)
- Google says that there are more than 50 Chrome apps available in the Chrome web store
- Some apps of note: Pixlr for photo editing, Wunderlist for task management and Pocket, the read later service

Q: Will we see developers start developing for Chrome instead of bothering with Windows and Mac OS X? Is this really that different than using single session browsers?

.

33

.

.

slWhy a growing number of app developers in Asia are prioritizing Android over iOShttp://thenextweb.com/asia/2013/09/06/why-a-growing-number-of-app-developers-in-asia-are-prioritizing-android-over-ios/

.

Android beats surging iOS again on mobile ad networkhttp://news.cnet.com/8301-1035_3-57601658-94/android-beats-surging-ios-again-on-mobile-ad-network/

.

- iOS dominant in US, Android huge in China & Korea. still making strides in Japan. why working with Android is easier: social messaging app Line spokesperson tells TNW that app store approvals, non-existent for Google Play, allow it to iterate quicker for Android, while monetization features like gifting and free coins are only available for Android. That’s because Apple revoked the gifting feature on Line’s iOS app in May due to a breach of its App Store terms and conditions.
- singapore has largest concentration of iphone users in the world
- mobile ad network Millennial Media.
- latest Millennial Media Mobile Mix report looking at popularity of mobile OSs by ad impressions: in Q2 2013, Android snared 51% of all ad impressions on the network. was up from the 46% seen in Q2 2012
- iOS remained firmly in second place. But it showed a healthy gain in ad impressions, rising to 42 percent last quarter from 34 percent in the same period last year. Combined, Android and iOS snagged 93 percent of all impressions
q: iphone will launch in china on china unicom and china telecom days after US launch, rather than months as with previous models. is apple making the right moves to surge ahead in Asian market?

.

37

.

tmSee how Elon Musk is building the 'Iron Man' lab with tech you can buyhttp://www.theverge.com/2013/9/5/4699214/elon-musk-iron-man-lab-revealed-video

.

BROLL: Video: Starting with woman putting on glasseshttp://youtu.be/xNqs_S-zEBY?t=2m8s

.

Screenshot of thread of Twitter posts from August 23http://www.theverge.com/2013/8/24/4653878/elon-musk-will-reveal-gesture-based-rocket-design

.

- August 23 Musk posted on Twitter about using hand gestures to design rocket engines, Favreau said "like Iron Man" Musk said "yup"
- Yesterday evening posted a video to the spacexchannel on YT showing off his "Iron Man" lab
- Leap Motion sensor, Oculus Rift, 3D projector and 3D Printer
- "I believe we're on the verge of a major breakthrough in design and manufacturing."
- "take something from your mind to a physical object with far greater ease than we currently do."
- Shows cryogenic valve housing being designed in video
Q: It's not-- well it is rocket science-- is it a BETTER way to do rocket science?

.

41

.

iaFirst Xbox One TV ad highlights NFL partnership, Skype and TV integration -- zero gaming actionhttp://www.techspot.com/news/53910-first-xbox-one-tv-ad-highlights-nfl-partnership-skype-and-tv-integration-zero-gaming-action.htmlVIDEO

.

- The first XBox One ad is out and there's no mention of video games
- The ad shows a person turning on an Xbox to watch an NFL game, then Skyping a friend, touts Xbox's fantasy football prowess. The ad ends with the Xbox One logo alongside the NFL logo
- Not one person picks up a video game controller. Not one person is playing a video game.
- In the comments section of the TechSpot.com, a commenter by the name of Wagan8r said "If you ask me, the Xbox One needs more of this kind of advertisement: Actual demonstration to the masses of its features. If that commercial is unsettling to you, then you have some serious issues."

Q: So this ad definitely makes more sense than those brand-awareness ads for Surface with the dance-y clicky people. Will people calm down about Microsoft's positioning of the Xbox One as a media box and not a gaming machine?

.

44

.

RandomizerWe will narrow this down to one story, put your initials to the left of the story you like bestVIDEO

.

Strawpollhttp://strawpoll.me/397295

.

.

NSA bans a T-shirt that made fun of it, now we all want that shirthttp://now.msn.com/nsa-bans-t-shirt-with-anti-nsa-message

.

Facebook-Flavored Ice Cream Is a Real Thinghttp://mashable.com/2013/09/05/facebook-flavored-ice-cream/

.

Scientists reveal new breakthrough in uncrackable quantum cryptographyhttp://www.theverge.com/2013/9/6/4701118/scientists-reveal-new-breakthrough-in-uncrackable-quantum-cryptography

.

Artificial muscles lift 80 times their weight, pave the way for robot Supermanhttp://www.engadget.com/2013/09/05/artificial-muscles-superhuman-strength/

.

CalendarVIDEO

.

Techcrunch Disrupt starts tomorrow, runs through the 11th, here in SFhttp://techcrunch.com/events/disrupt-sf-2013/

.

monday the 9th Venturebeat's Cloudbeat conf kicks off, runs through the 10thhttp://venturebeat.com/events/cloudbeat2013/

.

Note 3 arriving alongside Galaxy Gear October 1st and 2nd for $299.99http://www.theverge.com/2013/9/6/4700622/galaxy-note-3-gear-us-price-availability

.

.

.

.

.

.

INCOMINGVIDEO

.

.

.

.

.

.

Email

.

Hey TNT crew.

I’m just catching up on a few days of TWiT programming and finally got to the Samsung announcement and TNT discussing this. Everyone seems to be hung up on the fact that the Gear watch only works with Samsung devices and not HTC or Motorola. I have one word to explain this. APPLE.

Nobody screams when apple makes accessories that are proprietary to only iOS devices, either connector or software. I think Samsung feels like it is in the same position as Apple now and can call the shots and lock people into their ecosystem, and keep them there because their devices are always high quality and popular.

Huawei or Pantech couldn’t make it work if they tried because they are not the brands that come up when talking about the best phones. Sony has tried it because of their Apple-like loyal customer base who will pay more for similar hardware to other manufacturers, but even they have not been successful.

Just my 2.05 cents (after Canadian to US $ conversion)

Bruce

.

.

.

.

.

.

Thanks Darren!http://hak5.org

.

Thanks Len!http://peraltartsy.myshopify.com

.

Submit and vote on story coverage at http://technewstoday.reddit.com

.

Best of submissionshttp://twit.tv/bestof

.

Plug tomorrow's guest:Fr. Robert Ballacer

.

.

SPONSOR AD:

.

.

.

-
-
-
-
-
-