Breki Tomasson is on the show and while we will touch on a glaring omission from Healthkit, the main story is the bash vulnerability Shellshock. Thankfully Steve Gibson agreed to drop in and explain it to us!

MP3

Multiple versions (ogg, video etc.) from Archive.org.

Please SUBSCRIBE HERE.

A special thanks to all our Patreon supporters–without you, none of this would be possible.

If you enjoy the show, please consider supporting the show here at the low, low cost of a nickel a day on Patreon. Thank you!

Big thanks to Dan Lueders for the headlines music and Martin Bell for the opening theme!

Big thanks to Mustafa A. from thepolarcat.com for the logo!

Thanks to our mods, Kylde, TomGehrke and scottierowland on the subreddit

Show Notes

Today’s guest: Breki Tomasson, creator of the CSICon podcasting network and Steve Gibson, co-host of Security Now and head of the Gibson Research Corporation

Headlines

Last week a vulnerability in bash was reported to Red Hat by Unix expert Stephane Chazelas. The vulnerability was revealed late Wednesday. GigaOm has a good roundup of the details, but it essentially allows an environmental variable with an arbitrary name to carry a malicious function definition with trailing commands. That means it can get your server to execute code. It affects any OS that implements bash which includes Apache, most versions of Linux and Mac OS X. It also can include many routers, webcams and other embedded systems. Red Hat issued a partial patch and Akamai published some mitigation measures, but more fixes from more vendors are expected.

TechCrunch reports Apple says bent iPhone 6s are extremely rare and claims only nine people have complained to the company about it. Apple claims under normal use the problem rarely occurs and notes the new iPhones are built with steel/titanium inserts to reinforce stress locations. Apple also claims iPhone 6 models underwent testing to ensure they can endure bending, sitting, torsion and other kinds of stress.

Kotaku reports Valve released the Steam Music player for its desktop client. It’s not a streaming (or should we say steaming?) service just an in-game music player for your existing collection. So for instance if you want to be able to listen to Peter Gabriel’s Steam on the Steam Music Player, we now live in a world where that’s possible.

The PC is NOT DEAD! At least not in the US. NPD reports consumer retail PC sales grew 3% in the US from July 4th through Labor Day week. Last year sales declined 2.5% in that period. Chrome OS led the way increasing 37 percent over 2013 and Mac products rose 14 percent. Windows devices dropped 3%. Overall laptops rose 3.4% while desktop sales were essentially flat.

TechCrunch reports Apple apologized for the “great inconvenience” caused by its faulty iOS 8.0.1 update and claimed developers are working around the clock to prepare iOS 8.0.2 with a fix that will hopefully arrive in the next few days. Apple officially recommends rolling back iPhone 6 and 6 Plus from 8.0.1 to 8.

Reuters reports that European data privacy regulators gave Google guidelines on legally collecting and storing user data. Google came under privacy scrutiny from the European Union as well as six individual European countries after the company combined its privacy policies and data collection from sixty services into one, and giving users no way to opt out.

Apparently the EU feels a little warmer towards Facebook, because Reuters UK has two sources that say Facebook is about to win unconditional EU approval to purchase mobile messaging startup WhatsApp for $19 billion. European telecom companies like Deutsche Telekom and Telefonica want the EU to extract concessions from Facebook in light of WhatsApps plan to add free voice-call services later this year, but it looks like that may not happen. US regulators approved the deal in April.

 

 

News From You

BigJim1 submitted the ABCNews story on the successful arrival of India’s Mars Orbiter Mission and our subreddit users voted it up. The Indian Space and Research Organization is the first agency to be successful on a Mars mission in its first attempt. The orbiter program cost $75 million which Prime Minister Narendra Modi pointed out was less than it cost to make the movie Gravity. It’s also quite a bit less than the $671 million NASA spent on the Maven mission to Mars.

Kylde didn’t want us to miss the Technology Review report that Google X Lab’s head Astro Teller, speaking at the EmTech Conference on Tuesday, said Google aims to have a continuous ring of high-altitude balloons above the Southern Hemisphere within the next year. Project Loon as its called will provide LTE data service to cell phones on the ground at rates of 22 megabits per second to fixed antennas, and five megabits per second to mobile handsets. Teller said “if we can figure out a way to take the Internet to five billion people, that’s very valuable.”

Discussion Links:  Shellshock and a glaring Healthkit omission

http://www.troyhunt.com/2014/09/everything-you-need-to-know-about.html

http://www.reuters.com/article/2014/09/25/us-cybersecurity-shellshock-idUSKCN0HK23Y20140925

http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html

http://www.openwall.com/lists/oss-security/2014/09/24/11

https://twitter.com/taviso/status/514887394294652929

https://gigaom.com/2014/09/25/the-critical-shellshock-flaw-affects-many-linux-and-apple-systems-heres-what-you-need-to-know/

http://www.wired.com/2014/09/internet-braces-crazy-shellshock-worm/

http://blog.erratasec.com/2014/09/bash-bug-as-big-as-heartbleed.html#.VCRaXildXA4

http://www.zdnet.com/first-attacks-using-shellshock-bash-bug-discovered-7000034044/

http://www.theverge.com/2014/9/25/6844021/apple-promised-an-expansive-health-app-so-why-cant-i-track

Pick of the Day: SpeedCrunch via Cody Olivier

My pick is SpeedCrunch. As a game programmer and CS graduate student, I need a quick, straight forward, and simple calculator with some power behind it. Enter SpeedCrunch. It is a calculator that is completely controlled by your keyboard ( similar to command-line ) which supports user defined variables, a multitude of math functions, and comes with a table of scientific constants. It shows history, lets you retrieve previously entered equations, and my favorite feature is as you type in an equation, it will have a little pop-up with the current answer to the equation. This is very useful when I am adding up a lot of numbers and want to see the current total. It works for Windows and OSX and has a portable Windows version. I also believe the program is open source for anyone who wants to modify or look at the code.

Friday’s guest: Darren Kitchen and Len Peralta

Brian Brushwood is on the show and we’ll cover the history of post-iPhone release controversies including this year’s which involves the fact that when you put slim aluminum things under stress, they bend. But should they? The answer may surprise you.

MP3

Multiple versions (ogg, video etc.) from Archive.org.

Please SUBSCRIBE HERE.

A special thanks to all our Patreon supporters–without you, none of this would be possible.

If you enjoy the show, please consider supporting the show here at the low, low cost of a nickel a day on Patreon. Thank you!

Big thanks to Dan Lueders for the headlines music and Martin Bell for the opening theme!

Big thanks to Mustafa A. from thepolarcat.com for the logo!

Thanks to our mods, Kylde, TomGehrke and scottierowland on the subreddit

Show Notes

Today’s guest: Brian Brushwood, co-host of Night Attack and Cordkillers

Today’s title ” ” was chosen by  at showbot.replex.org

Headlines

Watch out Google X! Reuters reports Amazon will increase staff at it’s Lab126 R&D division by at least 27% over the next five years according to a tax agreement reached with the State of California in June. Among the projects. Sources told Reuters that areas of research at the lab include wearable devices and connected home devices. One would allow one-button product ordering from the kitchen over WiFi. Products like the Kindle ereader and FirePhone came out of Lab126.

The Next Web reports BlackBerry unveiled its square Passport smartphone today. The Passport has a 4.5-inch, 1440 x 1440 resolution display, a 2.2GHz quad-core Qualcomm Snapdragon 800 processor, 3GB RAM and 32GB of onboard storage, a 13 megapixel camera on the back and a 2 megapixel camera on the front. The phone runs BlackBerry 10.3, which features BlackBerry Blend, allowing users to manage files and communications across devices and platforms including Windows, Mac, iOS and Android device. The phone is available now and cost $599 in the US, $699 in Canada, £529 in the UK and €649 in Europe.

http://www.theverge.com/2014/9/24/6838103/blackberry-passport-att-availability

The Verge reports Apple says they “received reports of an issue with the iOS 8.0.1 update, are actively investigating the reports and have pulled the update for the time being. 8.0.1 was the first bug-fix update to iOS 8. These first patches notoriously cause unexpected problems. This time affected phones showed no service and touchID was unresponsive. The issue seemed only to affect iPhone 6 and 6 Plus. The best workaround if you already updated would be to downgrade to iOS 8. Search “downgrade to iOS 8” for several tutorials.

Recode reports Comcast filed its response to comments on its proposed merger with TWC. Comcast told the US FCC that Netflix, Dish Network and Discovery, among others opposed the deal because the companies failed in “extortion” attempts to get special favors. Yeah, Comcast used the word extortion once and “extortionate demands” twice in the filing. Discovery said Comcast continues to intimidate opposing voices and Netflix said, “It is extortion when Comcast fails to provide its own customers the broadband speed they’ve paid for unless Netflix also pays a ransom.” Whoa whoa whoa! Ransom? Extortion? Intimidation? C’mon folks, this is not Fat Tony’s House of Legitimate Business here… or is it?

Reuters reports Adobe will close its research and development arm in China by the end of December. Adobe will maintain its sales presence in Shanghai, Beijing, Guangzhou, Shenzhen, Hong Kong and Taiwan and focus on market development in the region. Last week, Adobe reported its worst quarterly revenue for Asia in the last five years.

News From You

t2t2 submitted the Polygon story that Blizzard CEO Mike Morhaime said the company will end development of a rumored video game codenamed Titan. Today Kotaku compiled everything it had heard about the game from various sources inside Blizzard. It had apparently been intended to be a near-future Earth set after an alien invasion had been fought off. Players would choose one of three factions and work normal jobs during the day, while at night turning into superhero like fighters against the other factions in a TF2 style game. Morhaime told Polygon they canceled the game because it just wasn’t good enough.

habichuelcondulce passes along the CNET report that Boeing has partnered with a company called Liquid Robotics to make SEA-FARING ROBOTS! That’s right, Boeing wants to build robots that can surveil the open seas, looking for drug traffickers and submarines. Or maybe drug traffickers IN submarines, because why limit yourself. Liquid Robotics is the company that built the Wave Glider SV3, a self-powered sea-faring data center that can stay in the ocean for months at a time. So add Boeing and BOOM SEA-ROBOT SOLDIERS

Discussion Links: What does the E.U. want?

http://www.bbc.com/news/technology-29331349

http://forums.macrumors.com/showthread.php?t=1785905

http://forums.macrumors.com/showpost.php?p=19826437&postcount=41

http://www.engadget.com/2014/09/23/bent-iphone-6-plus-problem/

http://www.geek.com/apple/iphone-6s-are-being-bent-in-peoples-pockets-including-mine-1605177/

http://www.cultofmac.com/297404/get-bent-shocking-history-bent-smartphones/

http://www.cultofmac.com/248603/iphone-5ses-are-bending-in-peoples-pockets/

http://thenextweb.com/apple/2014/09/24/apple-support-says-bent-iphones-must-pass-visual-inspection-qualify-warranty-replacement/

Pick of the Day:  Lootcrate via Rob Jennings

Today we have possibly the shortest recommendation we’ve ever received from Rob Jennings. And I quote: “Lootcrate.com a subscription services for monthly swag . It has different levels of boxes.” To elaborate just a bit: If you sign up for Lootcrate.com, they will send you a themed mystery box with a retail value of $40 or more. In August the theme was ‘HEROES’ and included a Groot Bobblehead, some mini ninja turtles, and a pair of Shwings (that’s wings for shoes) among many other things. The monthly plan costs $13.37/mo + $6 shipping and handling. Sign up for more months at a time and get a discount. Every month one lootcrater wins a megacrate, with $750 worth of stuff.

Thursday’s guest: Breki Tommason

Patrick Beja is on today. We’ll chat about the EU’s pursuit of remedies against Google’s dominant search position. Witch hunt or monoply-killing? Maybe neither.

MP3

Multiple versions (ogg, video etc.) from Archive.org.

Please SUBSCRIBE HERE.

A special thanks to all our Patreon supporters–without you, none of this would be possible.

If you enjoy the show, please consider supporting the show here at the low, low cost of a nickel a day on Patreon. Thank you!

Big thanks to Dan Lueders for the headlines music and Martin Bell for the opening theme!

Big thanks to Mustafa A. from thepolarcat.com for the logo!

Thanks to our mods, Kylde, TomGehrke and scottierowland on the subreddit

Show Notes

Today’s guest: Patrick Beja,

Today’s title ” ” was chosen by  at showbot.replex.org

Headlines

Geekwire reports on former Microsoft Chief Software Architect Ray Ozzie’s new service called Talko. That’s with an L. It lets users do things to voice calls, like tag them, bookmark moments, and record and share them. Users can also share text messages and photos through the app during a call. It can even do clever things like let you exchange recorded voice memos and then seamlessly turn those into a live call if you want. Ozzie co-founded Talko with Matt Pope and Eric Patey. The app is free to use and out first for iOS.

During his annual competition report to the European Union’s “committee on economic and monetary affairs,” Joaquin Almunia officially acknowledged that his department has asked Google for more changes to their proposed search settlement. At issue, is that Google favors its own services in search results. In February Google proposed several changes, most significantly, displaying three competing services next to its own. Opponents complained that the proposal did not do enough to mitigate Google’s dominant position in the EU marketplace.

Ars Technica reports the US Federal Trade Commission has filed a civil lawsuit against Butterfly Labs akl BFL alleging fraudulent and deceptive practices. The feds believe BFL’s founders spent millions on saunas and guns while failing to deliver promised bitcoin mining equipment. It’s pretty much just like the scams pulled off in San Francisco in 1849.

CNET reports Microsoft has set September 29th as the new date for the launch of the Xbox One in China. In compensation for the delay, pre-order customers will receive two free games. Microsoft will be the first game console maker to launch in China since a ban on game consoles was lifted. The Xbox One will cost 3,699 RMB ($600) without Kinect and 4,299 RMB ($700) with Kinect.

Remember that TechCrunch report yesterday that said Apple was going to shut down the Beats music service? The New York Times reports Apple spokesman Tom Neumayer said “This is not true.” An uncharacteristic flat denial from Apple. Well it’s uncharacteristic for Apple comment on such things at all.

Android Police reports Microsoft announced a Wireless Display Adapter that fits into the back of your TV (or monitor) and mirrors content from any Miracast-enabled device. For $60 you get a little black cable with HDMI at one end and USB (for power) at the other. That will let you mirror any Miracast-enabled device’s screen.

The Verge reports Paypal has partnered with Coinbase, BitPay and GoCoin to process bitcoin payments for some merchants in North America. If you sell intangible items like music, ringtones and the like through the PayPal Payments Hub, you can accept bitcoins now.

The Next Web reports that Jolla’s Sailfish-OS phone is on sale in India now, through Snapdeal.com. Jolla has been selling the phone in Europe through its own site since December. Customers in India will pay 16,499 Rupees ($270 USD) if they want to pick one up.

News From You

alanchar passes along the Wired report that AT&T is offering a new bundle for $39 a month, that includes 45Mbps Internet, HBO and basic cable. That sounds similar to the Comcast and TWC HBO and basic packages maybe. But WAIT there’s more! AT&T also includes one year of Amazon Prime which gets you instant streaming video the Kindle lending libray AND free two-day shipping. Take that Comcast!

tm204 passes along an Engadget report that Google Now has a new card in the deck. If you search for a plane ticket in Google Flights, Google Now will slip you a Flight price monitor card to keep you updated as prices change based on your recent destination or itinerary searches. Android Police notes that searching for flights on major travel sites like Orbitz or Kayak does not trigger a Google Now card.

AllanAV passes along the Wired article about four MIT students going to court to defend against a subpoena demanding the source code of a project called Tidbit. The tool was created for the Node Knockout hackathon and designed to let website visitors voluntarily use their computers to mine bitcoins in exchange for an ad-free experience at a website. The New Jersey attorney general claims the programmers violated New Jersey computer crime laws and demanded the source code and details of its users bitcoin wallets. The code was never fully functional. MIT has asked the subpoena to be withdrawn and the EFF is aiding with the defense.

Discussion Links: What does the E.U. want?

http://www.theverge.com/2014/9/23/6832389/eu-antitrust-chief-reverses-decision-says-google-must-improve-offer

http://europa.eu/rapid/press-release_SPEECH-14-615_en.htm
http://www.theverge.com/2014/2/14/5412690/google-publishes-full-text-of-eu-antitrust-agreement-to-quiet-critics

http://googlepolicyeurope.blogspot.nl/2014/02/settlement-with-european-commission.html

http://europa.eu/rapid/press-release_MEMO-14-87_en.htm

http://services.google.com/fh/files/blogs/google_commitments_full_2014.pdf

http://www.bloomberg.com/news/2014-09-08/eu-seeks-google-concessions-to-rescue-antitrust-pact.html

http://www.nytimes.com/2014/09/05/technology/opposition-grows-in-europe-to-google-antitrust-proposal.html

Pick of the Day:  

If iPhone and iPad users want to get taste of Android’s upcoming Material Design aesthetic, and get a great news app, they can try out Google Play Newstand which was released in the App Store today. This replaces its older Currents, and is a huge improvement. You can select which categories of news you want, and can customize the sources feeding into it. For me, it has replaced Feedly altogether and I am also using Flipboard a lot less as well. This is one Google App that works well as a stand-alone even if you are not into the Google ecosystem. Fast and nicely designed.

Plug of the Day: Plug of the day: Tuesday plug: The Sword and Laser Anthology collects 20 amazing stories from new writers in the Sword and Laser book club audience. 10 SciFi and 10 fantasy stories with an introduction by Patrick Rothfuss. Get a copy at swordandlaser.com/store

Wednesday’s guest: Brian Brushwood

Rob Krekel joins the show and we’ll talk about the new “Crescent Bay’ prototype from Oculus as well s the advent of 3D sound for VR.

MP3

Multiple versions (ogg, video etc.) from Archive.org.

Please SUBSCRIBE HERE.

A special thanks to all our Patreon supporters–without you, none of this would be possible.

If you enjoy the show, please consider supporting the show here at the low, low cost of a nickel a day on Patreon. Thank you!

Big thanks to Dan Lueders for the headlines music and Martin Bell for the opening theme!

Big thanks to Mustafa A. from thepolarcat.com for the logo!

Thanks to our mods, Kylde, TomGehrke and scottierowland on the subreddit

Show Notes

Today’s guest: Rob Krekel, sound designer for video game that include The Last of Us and Uncharted 3

Today’s title ” ” was chosen by  at showbot.replex.org

Headlines

Breaking news, people, Apple sold a lot of phones. According to Gigaom, the company reported the sale of ten million iPhone 6 and iPhone 6 plus phones between this past Friday and Sunday, beating last year’s 9 million sales of the 5c and 5s models. That may not seem like a big leap but remember iPhone 6 hasn’t gone on sale in China yet due to a delay in approval for sale.

TechCrunch reports it has five sources some of whom work at Apple and Beats, who say Apple will discontinue the Beats Music streaming service. Sources did not agree on whether this would mean it would be rolled into iTunes or not.

GigaOm passes along a Wall Street Journal tip that HTC will make Google’s upcoming 64-bit tablet, likely to be called the Nexus 9. That would make it the first Google device to run a 64-bit version of Android. The next version of Android, Android L, will be 64-bit capable. HTC has not manufactured a tablet since the HTC Flyer in 2011.

TechinAsia reports search engine Duck Duck Go has been blocked in China. The GreatFire Index suggests it may have been blocked starting Sep. 4. The New York Times published an in-depth piece yesterday about the trend of stricter controls on Internet companies in China, including Google, Line and Kakao Talk among others.

The Toronto Star reports that BlackBerry will sell its newest Passport smartphone for $599 off contract in the US , a few hundred dollars cheaper than phones like the iPhone 6 and Samsung Galaxy S5. The 4.5 inch square smartphone is the first totally new BlackBerry device to come on the market since CEO John Chen joined the company. Pricing for Canada has not yet been announced.

Hey connector cable and communication port protocol fans, listen up! The Video Electronics Standards Association announced Monday it’s teaming up with the USB 3.0 Promoter Group to have a baby. That baby will be called the DisplayPort Alternate Mode for the USB Type-C Standard. Aww it has it’s mothers reversability! That means devices can connect to existing DisplayPort monitors using a USB Type C to DisplayPort converter as long as the devices support the DisplayPort Alt Mode. A dock could support 10Gbps USB data transfer and support a 4K DisplayPort monitor.

 

 

 

 

News From You

swiftpawz passes along the word that Google no longer requires new users to create a Google+ account when signing up for other Google products. According to a PC Mag retelling of a Marketing Land report, the Google + account is now presented as optional during the signup process. Though you’ll still need a G+ account to do things like leave comments on YouTube or leave app reviews.

AllanAV called our attention to the Anandtech report that Samsung is aware of a problem with two of their solid state drives, the 840 and 840 EVO, that have caused low read performance on older data. Samsung engineers are working on updated firmware. As soon as the fix has been validated they’ll get the new firmware out to end users, though no ETA has been announced.

And finally KAPT_Kipper submitted the best long read of the day from Ars Technica – a terrific account by Cyrus Farivar about an Italian restaurant in Richmond, California which is trying to become the worst-reviewed restaurant on Yelp to highlight their frustration with what the restaurant owners believe are Yelp’s aggressive sales tactics. The restaurant is offering a 25 percent discount to anyone who writes a terrible review. Yelp, predictably is not pleased, saying the restaurant owners are violating Yelp’s terms of service by offering incentives in exchange for reviews. And in case you were wondering, according to the author of the article, it turns out the food there is pretty tasty.

Discussion Links: Oculus

http://www.theverge.com/2014/9/20/6660901/oculus-announces-new-vr-headset-prototype-crescent-bay

http://www.theverge.com/2014/9/20/6661525/oculus-crescent-bay-prototype-headset-hands-on

http://www.theverge.com/2014/9/22/6826877/i-tricked-my-brain-into-thinking-real-life-was-vr

http://recode.net/2014/09/20/oculus-announces-latest-prototype-crescent-bay/

http://arstechnica.com/gaming/2014/09/eyes-on-oculus-crescent-bay-prototype-is-a-new-high-water-mark/

http://recode.net/2014/09/20/whats-the-killer-app-for-vr-maybe-not-games-oculus-developers-say/

http://realspace3daudio.com/

http://www.bizjournals.com/washington/print-edition/2011/05/20/university-of-maryland-spinout-takes.html?page=all

http://twobigears.com/

Pick of the Day:  XBMC (Kodi) add-on called PseudoTV Live via Dave

As someone who will soon be moving into an area that has Comcast as the ONLY option for cable I figured I would attempt to cut the cord (more or less). I have a pc hooked to my living room tv and am one of those digital hoarders with a 4tb external drive nearly filled with movies and tv shows (mostly ripped from my own personal collection because honestly who has space for almost 600 dvds in their living room anymore?). My wife and I would stare at a list of movies on the tv and usually end up switching back to cable watching a censored and cut up version of something we already own on DVD or on the pc. I did a little looking around and found an add on for XBMC called PseudoTV Live where you can set up your own “channels” and flip through your own local content as well as online content (The add on comes with a few dozen RSS feeds set as channels including a TWIT channel as well as a Scam School one). The add on has a built in channel guide and is almost indistinguishable from a real cable system and although it can be somewhat frustrating to set up once you get it working properly (I consider myself a semi above average computer user and still rage uninstalled the thing more than a couple of times) it becomes a very viable alternative to cable, I have had it set up and working properly for a couple of weeks now and my wife and I have not turned back to cable since (except to watch Da Bears stomp on the 49ers last Sunday).

Plug of the Day: Daily Tech News Show Shirt  with Mustafa from thepolarcat.com’s logo now available in white, black and Ash. Look in the podcasts section.

Tuesday’s guests: Patrick Beja