SECURITY BITS: Meaner POODLE bug that bypasses TLS crypto bites 10 percent of websites

Some of the world’s leading websites—including those owned or operated by Bank of America, VMware, the US Department of Veteran’s Affairs, and business consultancy Accenture—are vulnerable to simple attacks that bypass the transport layer security encryption designed to thwart eavesdroppers and spoofers. The attacks are a variation on the so-called POODLE exploits disclosed two months ago .

Read more: Meaner Poodle Exploits

TECH BITS: Hackers promise “Christmas present” Sony Pictures won’t like.

This weekend, the “Guardians of Peace”—the cyber-attackers who brought Sony Pictures Entertainment’s network down in November and have since shared over a terabyte of the company’s internal data—made two more dumps of SPE data to file sharing sites and torrents. The second of the two, on Sunday, was the e-mail box of Sony Pictures Releasing International President Steven O’Dell. And the hackers promised a “Christmas present” soon of even more data if the company does not relent and meet their unspecified demands.

Read more: Hackers Christmas Present for Sony

TECH BITS: Firefox on you iPhone (if you have one of those that is).

It appears that iPhone and iPad owners could be getting a new browser on their devices soon, with Mozilla’s VP for its popular web browser Firefox, Jonathan Nightingale, stating that the company is keen to get Firefox on iOS.

Although Firefox is one of the world’s most popular web browsers, it currently isn’t available on Apple devices. Mozilla, the company behind the open source browser, has said in the past that Firefox would not be coming to iOS.

This was apparently due to Apple not allowing Mozilla to use its own web engine on iOS. Instead Mozilla would have to use Apple’s own JavaScript and rendering engines, like other third party browsers such as Chrome have done.

Read more:  Mozilla on your iPhone

PRIVACY BITS: Wireless carrier isn’t only cheating their end customers but are also over charging the government to spy on you!

Cricket Communications, a low-cost brand of AT&T as of March 2014, has agreed to pay over $2.1 million to settle allegations that the company “overcharged federal law enforcement agencies for the costs of carrying out court-ordered wiretaps and pen registers,” federal authorities announced on Monday.

Read more:

http://arstechnica.com/tech-policy/2014/12/cricket-to-pay-feds-2-1m-after-allegations-it-charged-too-much-for-wiretaps/#p3