Breki Tomasson is on the show and while we will touch on a glaring omission from Healthkit, the main story is the bash vulnerability Shellshock. Thankfully Steve Gibson agreed to drop in and explain it to us!

MP3

Multiple versions (ogg, video etc.) from Archive.org.

Please SUBSCRIBE HERE.

A special thanks to all our Patreon supporters–without you, none of this would be possible.

If you enjoy the show, please consider supporting the show here at the low, low cost of a nickel a day on Patreon. Thank you!

Big thanks to Dan Lueders for the headlines music and Martin Bell for the opening theme!

Big thanks to Mustafa A. from thepolarcat.com for the logo!

Thanks to our mods, Kylde, TomGehrke and scottierowland on the subreddit

Show Notes

Today’s guest: Breki Tomasson, creator of the CSICon podcasting network and Steve Gibson, co-host of Security Now and head of the Gibson Research Corporation

Headlines

Last week a vulnerability in bash was reported to Red Hat by Unix expert Stephane Chazelas. The vulnerability was revealed late Wednesday. GigaOm has a good roundup of the details, but it essentially allows an environmental variable with an arbitrary name to carry a malicious function definition with trailing commands. That means it can get your server to execute code. It affects any OS that implements bash which includes Apache, most versions of Linux and Mac OS X. It also can include many routers, webcams and other embedded systems. Red Hat issued a partial patch and Akamai published some mitigation measures, but more fixes from more vendors are expected.

TechCrunch reports Apple says bent iPhone 6s are extremely rare and claims only nine people have complained to the company about it. Apple claims under normal use the problem rarely occurs and notes the new iPhones are built with steel/titanium inserts to reinforce stress locations. Apple also claims iPhone 6 models underwent testing to ensure they can endure bending, sitting, torsion and other kinds of stress.

Kotaku reports Valve released the Steam Music player for its desktop client. It’s not a streaming (or should we say steaming?) service just an in-game music player for your existing collection. So for instance if you want to be able to listen to Peter Gabriel’s Steam on the Steam Music Player, we now live in a world where that’s possible.

The PC is NOT DEAD! At least not in the US. NPD reports consumer retail PC sales grew 3% in the US from July 4th through Labor Day week. Last year sales declined 2.5% in that period. Chrome OS led the way increasing 37 percent over 2013 and Mac products rose 14 percent. Windows devices dropped 3%. Overall laptops rose 3.4% while desktop sales were essentially flat.

TechCrunch reports Apple apologized for the “great inconvenience” caused by its faulty iOS 8.0.1 update and claimed developers are working around the clock to prepare iOS 8.0.2 with a fix that will hopefully arrive in the next few days. Apple officially recommends rolling back iPhone 6 and 6 Plus from 8.0.1 to 8.

Reuters reports that European data privacy regulators gave Google guidelines on legally collecting and storing user data. Google came under privacy scrutiny from the European Union as well as six individual European countries after the company combined its privacy policies and data collection from sixty services into one, and giving users no way to opt out.

Apparently the EU feels a little warmer towards Facebook, because Reuters UK has two sources that say Facebook is about to win unconditional EU approval to purchase mobile messaging startup WhatsApp for $19 billion. European telecom companies like Deutsche Telekom and Telefonica want the EU to extract concessions from Facebook in light of WhatsApps plan to add free voice-call services later this year, but it looks like that may not happen. US regulators approved the deal in April.

 

 

News From You

BigJim1 submitted the ABCNews story on the successful arrival of India’s Mars Orbiter Mission and our subreddit users voted it up. The Indian Space and Research Organization is the first agency to be successful on a Mars mission in its first attempt. The orbiter program cost $75 million which Prime Minister Narendra Modi pointed out was less than it cost to make the movie Gravity. It’s also quite a bit less than the $671 million NASA spent on the Maven mission to Mars.

Kylde didn’t want us to miss the Technology Review report that Google X Lab’s head Astro Teller, speaking at the EmTech Conference on Tuesday, said Google aims to have a continuous ring of high-altitude balloons above the Southern Hemisphere within the next year. Project Loon as its called will provide LTE data service to cell phones on the ground at rates of 22 megabits per second to fixed antennas, and five megabits per second to mobile handsets. Teller said “if we can figure out a way to take the Internet to five billion people, that’s very valuable.”

Discussion Links:  Shellshock and a glaring Healthkit omission

http://www.troyhunt.com/2014/09/everything-you-need-to-know-about.html

http://www.reuters.com/article/2014/09/25/us-cybersecurity-shellshock-idUSKCN0HK23Y20140925

http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html

http://www.openwall.com/lists/oss-security/2014/09/24/11

https://twitter.com/taviso/status/514887394294652929

https://gigaom.com/2014/09/25/the-critical-shellshock-flaw-affects-many-linux-and-apple-systems-heres-what-you-need-to-know/

http://www.wired.com/2014/09/internet-braces-crazy-shellshock-worm/

http://blog.erratasec.com/2014/09/bash-bug-as-big-as-heartbleed.html#.VCRaXildXA4

http://www.zdnet.com/first-attacks-using-shellshock-bash-bug-discovered-7000034044/

http://www.theverge.com/2014/9/25/6844021/apple-promised-an-expansive-health-app-so-why-cant-i-track

Pick of the Day: SpeedCrunch via Cody Olivier

My pick is SpeedCrunch. As a game programmer and CS graduate student, I need a quick, straight forward, and simple calculator with some power behind it. Enter SpeedCrunch. It is a calculator that is completely controlled by your keyboard ( similar to command-line ) which supports user defined variables, a multitude of math functions, and comes with a table of scientific constants. It shows history, lets you retrieve previously entered equations, and my favorite feature is as you type in an equation, it will have a little pop-up with the current answer to the equation. This is very useful when I am adding up a lot of numbers and want to see the current total. It works for Windows and OSX and has a portable Windows version. I also believe the program is open source for anyone who wants to modify or look at the code.

Friday’s guest: Darren Kitchen and Len Peralta

Brian Brushwood is on the show and we’ll cover the history of post-iPhone release controversies including this year’s which involves the fact that when you put slim aluminum things under stress, they bend. But should they? The answer may surprise you.

MP3

Multiple versions (ogg, video etc.) from Archive.org.

Please SUBSCRIBE HERE.

A special thanks to all our Patreon supporters–without you, none of this would be possible.

If you enjoy the show, please consider supporting the show here at the low, low cost of a nickel a day on Patreon. Thank you!

Big thanks to Dan Lueders for the headlines music and Martin Bell for the opening theme!

Big thanks to Mustafa A. from thepolarcat.com for the logo!

Thanks to our mods, Kylde, TomGehrke and scottierowland on the subreddit

Show Notes

Today’s guest: Brian Brushwood, co-host of Night Attack and Cordkillers

Today’s title ” ” was chosen by  at showbot.replex.org

Headlines

Watch out Google X! Reuters reports Amazon will increase staff at it’s Lab126 R&D division by at least 27% over the next five years according to a tax agreement reached with the State of California in June. Among the projects. Sources told Reuters that areas of research at the lab include wearable devices and connected home devices. One would allow one-button product ordering from the kitchen over WiFi. Products like the Kindle ereader and FirePhone came out of Lab126.

The Next Web reports BlackBerry unveiled its square Passport smartphone today. The Passport has a 4.5-inch, 1440 x 1440 resolution display, a 2.2GHz quad-core Qualcomm Snapdragon 800 processor, 3GB RAM and 32GB of onboard storage, a 13 megapixel camera on the back and a 2 megapixel camera on the front. The phone runs BlackBerry 10.3, which features BlackBerry Blend, allowing users to manage files and communications across devices and platforms including Windows, Mac, iOS and Android device. The phone is available now and cost $599 in the US, $699 in Canada, £529 in the UK and €649 in Europe.

http://www.theverge.com/2014/9/24/6838103/blackberry-passport-att-availability

The Verge reports Apple says they “received reports of an issue with the iOS 8.0.1 update, are actively investigating the reports and have pulled the update for the time being. 8.0.1 was the first bug-fix update to iOS 8. These first patches notoriously cause unexpected problems. This time affected phones showed no service and touchID was unresponsive. The issue seemed only to affect iPhone 6 and 6 Plus. The best workaround if you already updated would be to downgrade to iOS 8. Search “downgrade to iOS 8” for several tutorials.

Recode reports Comcast filed its response to comments on its proposed merger with TWC. Comcast told the US FCC that Netflix, Dish Network and Discovery, among others opposed the deal because the companies failed in “extortion” attempts to get special favors. Yeah, Comcast used the word extortion once and “extortionate demands” twice in the filing. Discovery said Comcast continues to intimidate opposing voices and Netflix said, “It is extortion when Comcast fails to provide its own customers the broadband speed they’ve paid for unless Netflix also pays a ransom.” Whoa whoa whoa! Ransom? Extortion? Intimidation? C’mon folks, this is not Fat Tony’s House of Legitimate Business here… or is it?

Reuters reports Adobe will close its research and development arm in China by the end of December. Adobe will maintain its sales presence in Shanghai, Beijing, Guangzhou, Shenzhen, Hong Kong and Taiwan and focus on market development in the region. Last week, Adobe reported its worst quarterly revenue for Asia in the last five years.

News From You

t2t2 submitted the Polygon story that Blizzard CEO Mike Morhaime said the company will end development of a rumored video game codenamed Titan. Today Kotaku compiled everything it had heard about the game from various sources inside Blizzard. It had apparently been intended to be a near-future Earth set after an alien invasion had been fought off. Players would choose one of three factions and work normal jobs during the day, while at night turning into superhero like fighters against the other factions in a TF2 style game. Morhaime told Polygon they canceled the game because it just wasn’t good enough.

habichuelcondulce passes along the CNET report that Boeing has partnered with a company called Liquid Robotics to make SEA-FARING ROBOTS! That’s right, Boeing wants to build robots that can surveil the open seas, looking for drug traffickers and submarines. Or maybe drug traffickers IN submarines, because why limit yourself. Liquid Robotics is the company that built the Wave Glider SV3, a self-powered sea-faring data center that can stay in the ocean for months at a time. So add Boeing and BOOM SEA-ROBOT SOLDIERS

Discussion Links: What does the E.U. want?

http://www.bbc.com/news/technology-29331349

http://forums.macrumors.com/showthread.php?t=1785905

http://forums.macrumors.com/showpost.php?p=19826437&postcount=41

http://www.engadget.com/2014/09/23/bent-iphone-6-plus-problem/

http://www.geek.com/apple/iphone-6s-are-being-bent-in-peoples-pockets-including-mine-1605177/

http://www.cultofmac.com/297404/get-bent-shocking-history-bent-smartphones/

http://www.cultofmac.com/248603/iphone-5ses-are-bending-in-peoples-pockets/

http://thenextweb.com/apple/2014/09/24/apple-support-says-bent-iphones-must-pass-visual-inspection-qualify-warranty-replacement/

Pick of the Day:  Lootcrate via Rob Jennings

Today we have possibly the shortest recommendation we’ve ever received from Rob Jennings. And I quote: “Lootcrate.com a subscription services for monthly swag . It has different levels of boxes.” To elaborate just a bit: If you sign up for Lootcrate.com, they will send you a themed mystery box with a retail value of $40 or more. In August the theme was ‘HEROES’ and included a Groot Bobblehead, some mini ninja turtles, and a pair of Shwings (that’s wings for shoes) among many other things. The monthly plan costs $13.37/mo + $6 shipping and handling. Sign up for more months at a time and get a discount. Every month one lootcrater wins a megacrate, with $750 worth of stuff.

Thursday’s guest: Breki Tommason

Patrick Beja is on today. We’ll chat about the EU’s pursuit of remedies against Google’s dominant search position. Witch hunt or monoply-killing? Maybe neither.

MP3

Multiple versions (ogg, video etc.) from Archive.org.

Please SUBSCRIBE HERE.

A special thanks to all our Patreon supporters–without you, none of this would be possible.

If you enjoy the show, please consider supporting the show here at the low, low cost of a nickel a day on Patreon. Thank you!

Big thanks to Dan Lueders for the headlines music and Martin Bell for the opening theme!

Big thanks to Mustafa A. from thepolarcat.com for the logo!

Thanks to our mods, Kylde, TomGehrke and scottierowland on the subreddit

Show Notes

Today’s guest: Patrick Beja,

Today’s title ” ” was chosen by  at showbot.replex.org

Headlines

Geekwire reports on former Microsoft Chief Software Architect Ray Ozzie’s new service called Talko. That’s with an L. It lets users do things to voice calls, like tag them, bookmark moments, and record and share them. Users can also share text messages and photos through the app during a call. It can even do clever things like let you exchange recorded voice memos and then seamlessly turn those into a live call if you want. Ozzie co-founded Talko with Matt Pope and Eric Patey. The app is free to use and out first for iOS.

During his annual competition report to the European Union’s “committee on economic and monetary affairs,” Joaquin Almunia officially acknowledged that his department has asked Google for more changes to their proposed search settlement. At issue, is that Google favors its own services in search results. In February Google proposed several changes, most significantly, displaying three competing services next to its own. Opponents complained that the proposal did not do enough to mitigate Google’s dominant position in the EU marketplace.

Ars Technica reports the US Federal Trade Commission has filed a civil lawsuit against Butterfly Labs akl BFL alleging fraudulent and deceptive practices. The feds believe BFL’s founders spent millions on saunas and guns while failing to deliver promised bitcoin mining equipment. It’s pretty much just like the scams pulled off in San Francisco in 1849.

CNET reports Microsoft has set September 29th as the new date for the launch of the Xbox One in China. In compensation for the delay, pre-order customers will receive two free games. Microsoft will be the first game console maker to launch in China since a ban on game consoles was lifted. The Xbox One will cost 3,699 RMB ($600) without Kinect and 4,299 RMB ($700) with Kinect.

Remember that TechCrunch report yesterday that said Apple was going to shut down the Beats music service? The New York Times reports Apple spokesman Tom Neumayer said “This is not true.” An uncharacteristic flat denial from Apple. Well it’s uncharacteristic for Apple comment on such things at all.

Android Police reports Microsoft announced a Wireless Display Adapter that fits into the back of your TV (or monitor) and mirrors content from any Miracast-enabled device. For $60 you get a little black cable with HDMI at one end and USB (for power) at the other. That will let you mirror any Miracast-enabled device’s screen.

The Verge reports Paypal has partnered with Coinbase, BitPay and GoCoin to process bitcoin payments for some merchants in North America. If you sell intangible items like music, ringtones and the like through the PayPal Payments Hub, you can accept bitcoins now.

The Next Web reports that Jolla’s Sailfish-OS phone is on sale in India now, through Snapdeal.com. Jolla has been selling the phone in Europe through its own site since December. Customers in India will pay 16,499 Rupees ($270 USD) if they want to pick one up.

News From You

alanchar passes along the Wired report that AT&T is offering a new bundle for $39 a month, that includes 45Mbps Internet, HBO and basic cable. That sounds similar to the Comcast and TWC HBO and basic packages maybe. But WAIT there’s more! AT&T also includes one year of Amazon Prime which gets you instant streaming video the Kindle lending libray AND free two-day shipping. Take that Comcast!

tm204 passes along an Engadget report that Google Now has a new card in the deck. If you search for a plane ticket in Google Flights, Google Now will slip you a Flight price monitor card to keep you updated as prices change based on your recent destination or itinerary searches. Android Police notes that searching for flights on major travel sites like Orbitz or Kayak does not trigger a Google Now card.

AllanAV passes along the Wired article about four MIT students going to court to defend against a subpoena demanding the source code of a project called Tidbit. The tool was created for the Node Knockout hackathon and designed to let website visitors voluntarily use their computers to mine bitcoins in exchange for an ad-free experience at a website. The New Jersey attorney general claims the programmers violated New Jersey computer crime laws and demanded the source code and details of its users bitcoin wallets. The code was never fully functional. MIT has asked the subpoena to be withdrawn and the EFF is aiding with the defense.

Discussion Links: What does the E.U. want?

http://www.theverge.com/2014/9/23/6832389/eu-antitrust-chief-reverses-decision-says-google-must-improve-offer

http://europa.eu/rapid/press-release_SPEECH-14-615_en.htm
http://www.theverge.com/2014/2/14/5412690/google-publishes-full-text-of-eu-antitrust-agreement-to-quiet-critics

http://googlepolicyeurope.blogspot.nl/2014/02/settlement-with-european-commission.html

http://europa.eu/rapid/press-release_MEMO-14-87_en.htm

http://services.google.com/fh/files/blogs/google_commitments_full_2014.pdf

http://www.bloomberg.com/news/2014-09-08/eu-seeks-google-concessions-to-rescue-antitrust-pact.html

http://www.nytimes.com/2014/09/05/technology/opposition-grows-in-europe-to-google-antitrust-proposal.html

Pick of the Day:  

If iPhone and iPad users want to get taste of Android’s upcoming Material Design aesthetic, and get a great news app, they can try out Google Play Newstand which was released in the App Store today. This replaces its older Currents, and is a huge improvement. You can select which categories of news you want, and can customize the sources feeding into it. For me, it has replaced Feedly altogether and I am also using Flipboard a lot less as well. This is one Google App that works well as a stand-alone even if you are not into the Google ecosystem. Fast and nicely designed.

Plug of the Day: Plug of the day: Tuesday plug: The Sword and Laser Anthology collects 20 amazing stories from new writers in the Sword and Laser book club audience. 10 SciFi and 10 fantasy stories with an introduction by Patrick Rothfuss. Get a copy at swordandlaser.com/store

Wednesday’s guest: Brian Brushwood