The Hosts Awaken

The Hosts Awaken
Number	2651
Broadcast Date	DECEMBER 22, 2015
Episode Length	33:27
Hosts	Tom Merritt
Guests	Patrick Beja, Len Peralta, Jon Strickland, Allison Sheridan, Peter Wells, Todd Whitehead, Darren Kitchen, Patrick Norton, Shannon Morse

Wired has a theory on the Juniper backdoor and Yahoo says Google and Ford will team up on cars. Tom Merritt and Patrick Beja discuss that and much more.

Guest

• Patrick Beja
  • Patrick's Patreon
• Len Peralta
• Jon Strickland
  • Fw:Thinking
• Allison Sheridan
  • The NosillaCast
• Peter Wells
  • Reckoner
• Todd Whitehead
  • Alpha Geek Radio
• Darren Kitchen
  • Hak5
• Patrick Norton
  • TekThing
  • Threatwire's Patreon
• Shannon Morse
  • TekThing
    • Hak5

Headlines

• Researchers Solve Juniper Backdoor Mystery; Signs Point to NSA

Wired reports Comsecuris CEO Ralf-Philipp Weinmann posted Monday his findings on the Juniper backdoor. Weinman says Juniper used the Dual_EC random number generator in its NetScreen firewalls. A weakness in Dual_EC was first reported in 2007 that acted as a backdoor. Memos leaked by Edward Snowden in September 2013 alleged the backdoor in Dual_EC was intentional. The National Institute of Standards and Technology withdrew its support for Dual_EC after that report. Juniper did not remove Dual_EC because it implemented its own random generator but a bug allowed attackers to bypass that second generator and use Dual_EC instead. Juniper has patched the problem but still not removed Dual_EC. The FBI is investigating the issue.

• Google Pairs With Ford To Build Self-Driving Cars

Yahoo says three sources familiar with the plans tell it Google and Ford are teaming up to build self-driving cars. Ford would get access to Google’s self-driving tech and test data, while Google would get Ford’s automotive manufacturing expertise. The venture, to be announced at CES, is expected to be a legally separate entity from Ford and non-exclusive for Google.

• Keeping browsing experience in users’ hands

Microsoft posted on TechNew that it will no longer allow ad injection software that injects by proxy, changes DNS settings, or does network layer manipulation, starting March 31st. In other words no man in the middle adware. Programs that fail to comply will be detected and removed.

• Google Begins Testing Password-Free Logins

TechCrunch reports Google confirmed it is testing a way to sign in without a password. Android Police noticed Reddit user Rohit Paul’s post that he was invited into “Sign-in Experiments at Google.” Users in the test only enter their email address to begin logging in. A notification is then sent to their phone. If they tap yes, they’re logged in on the other device.

• Oracle settles with FTC over Java’s “deceptive” security patching

Oracle has agreed to settle FTC complaints over its Java Software Updates. According to Ars Technica the FTC charged that Oracle deceived consumers by giving the impression that Java SE updates would take care of any security issues. The Java SE updates only removed the most recent version, leaving anything before Java SE 6.1 on a consumer’s machine and therefore “… vulnerable to security risks”. The settlement requires Oracle to post a Java uninstall tool on its site and notify consumers the security threat of having older Java versions installed.

• Silicon Valley Gangs up on U.K. Plans to Extend Surveillance

The Financial Times reports Apple submitted testimony to the UK’s parliamentary committee reviewing the draft “Investigatory Powers Bill.” Apple argued the law would “immobilize substantial portions of the tech sector and spark serious international conflicts,” as well as make personal data less secure. The bill requires a back door to all encryption be provided to surveillance agencies to be used only when authorized by the Home Affairs Secretary and a judicial commissioner. Google, Facebook, Twitter, Yahoo and Microsoft all intend to submit their own testimony as well.

• Early Builds of Final Oculus Rift Shipping to Developers

Oculus announced Monday it has started shipping SDK 1.0 and final versions of the Rift hardware to developers working on launch titles. The company said it will be shipping hardware “every week” up to official launch in the first quarter of 2016. Launch developers who have not received hardware should use the Oculus submission tool and a representative will contact them.

• Report: Samsung will start building chips for AMD

Korea’s Electronic Times reports Samsung will manufacture AMD’s Greenland GPUs and Zen CPUs on its 14-nanometer chip foundry starting in 2016. Abu Dhabi based Global Foundries will also continue to manufacture the chips for AMD.

Links

• This episode on dailytechnewsshow.com
• Support DTNS on Patreon
• DTNS subreddit

Preceded by: "Legally Binding Mug"

The Hosts Awaken

Followed by: "All Your Picks!"