TECHZIE.BLOGSPOT.COM

Your TECH GADGET GURU



Apple’s newest iPhone devices have been hacked with a zero-day font vulnerability in the latest iteration of the JailbreakMe.com project.
The JailbreakMe.com exploit allows the automated jailbreaking of iPhone/iPad/iPod Touch devices from a specially created Web site.
It is essentially a drive-by download attack that exploits the way Apple’s mobile operating system processes certain fonts.  Technical details of the vulnerability are not yet know.
It is likely being combined with a second privilege escalation bug to escape the iOS sandbox, much like the first version of the jailbreakexploit.   According to “Comex,” the hacker behind the site, the exploit defeats ASLR (Address Space Layout Randomization), a key anti-exploit mechanism.
Along with the jailbreak exploit, “Comex” also released a patch for the main vulnerability.
“Due to the nature of iOS, this patch can only be installed on a jailbroken device.   Until Apple releases an update, jailbreaking will ironically be the best way to remain secure,” he explained.
On the issue of releasing exploit for zero-day flaws, here’s a note from the site’s FAQ:
I did not create the vulnerabilities, only discover them.  Releasing an exploit demonstrates the flaw, making it easier for others to use it for malice, but they have long been present and exploitable.  Although releasing a jailbreak is certainly not the usual way to report a vulnerability, it still has the effect of making iOS more secure in the long run.



Apple is rushing to fix a security hole found in its iOS mobile software following a stern warning from a German IT security department.
The Associated Press is reporting that Germany’s Federal Office for Information Security found that flaw stems from clicking on an infected PDF file, which “is sufficient to infect the mobile device with malware without the user’s knowledge.” That opens the door for the user’s passwords, emails, text messages, emails and almost anything else stored on the iPhone, iPad or iPod touch in question.
Apple’s response:
Apple Inc. spokeswoman Bethan Lloyd said Thursday the company is “aware of this reported issue and developing a fix that will be available to customers in an upcoming software update.”
Apparently this is damaging on “several versions” of iOS, but not all. The Guardian has cited specifics:
The problem may occur on iPhone 3GS, iPhone 4, iPad, iPad 2 and the iPod Touch with software versions including iOS 4.3.3, and it “cannot be excluded” that other iOS versions – including the iOS 5 due in September – have the same weakness, said the Bonn-based federal bureau.
The security gap was originally uncovered by a group of hackers trying to jailbreak an iPhone. Some third-parties who produce jailbreaking software have already posted patches. However, it appears that this problem, related to PDF files, is different from the recent zero-day font vulnerability found in JailbreakMe.com. That doesn’t necessarily mean they are unrelated, but just different.
Adrian Kingsley-Hughes reports, there is a debate over whether or not jailbroken iPhones and other iOS devices are actually safer or not. But a patch from Apple for this specific problem is still needed immediately.
All of this follows the recent discovery that Apple could also be a target of the AntiSec campaign, adding fuel to the theory that the Cupertino, Calif.-based company could be the “Holy Grail” for hackers.



Apple is rushing to fix a security hole found in its iOS mobile software following a stern warning from a German IT security department.
The Associated Press is reporting that Germany’s Federal Office for Information Security found that flaw stems from clicking on an infected PDF file, which “is sufficient to infect the mobile device with malware without the user’s knowledge.” That opens the door for the user’s passwords, emails, text messages, emails and almost anything else stored on the iPhone, iPad or iPod touch in question.
Apple’s response:
Apple Inc. spokeswoman Bethan Lloyd said Thursday the company is “aware of this reported issue and developing a fix that will be available to customers in an upcoming software update.”
Apparently this is damaging on “several versions” of iOS, but not all. The Guardian has cited specifics:
The problem may occur on iPhone 3GS, iPhone 4, iPad, iPad 2 and the iPod Touch with software versions including iOS 4.3.3, and it “cannot be excluded” that other iOS versions – including the iOS 5 due in September – have the same weakness, said the Bonn-based federal bureau.
The security gap was originally uncovered by a group of hackers trying to jailbreak an iPhone. Some third-parties who produce jailbreaking software have already posted patches. However, it appears that this problem, related to PDF files, is different from the recent zero-day font vulnerability found in JailbreakMe.com. That doesn’t necessarily mean they are unrelated, but just different.
As ZDNet’s Adrian Kingsley-Hughes reports, there is a debate over whether or not jailbroken iPhones and other iOS devices are actually safer or not. But a patch from Apple for this specific problem is still needed immediately.
All of this follows the recent discovery that Apple could also be a target of the AntiSec campaign, adding fuel to the theory that the Cupertino, Calif.-based company could be the “Holy Grail” for hackers.


Two months after the launch of Research In Motion’s PlayBook tablet, AT&T approved the BlackBerry Bridge app that pairs BlackBerry smartphones with the slate, just this afternoon. To add insult to injury, AT&T is requiring an extra $20 per month tethering fee (unless their data plan already includes the option) for PlayBook users to access the Internet through the Bridge Browser while the RIM devices are tethered, as noted in fine print on the Official BlackBerry Blog:
AT&T users must have a tethering plan included with their wireless service plan to take advantage of the Bridge Browser.
Matthew Miller over at our Smartphones and Cellphones blog wants to know what took AT&T so long? None of AT&T’s rivals Verizon, Sprint or T-Mobile had any trouble enabling the same app back in April, and neither T-Mobile nor Verizon charges for tethering. Irate netizens seem to believe AT&T just needed time to block the Bridge Browser from the non-paying tether users.
BlackBerry Bridge is crucial utility app that gives the PlayBook tablet access to the BlackBerry smartphone user’s existing secured BB emails, calender, contacts, tasks and BlackBerry Messenger (BBM), in addition to the Bridge Browser. Without the Bridge app, the PlayBook has no native BB email client and is one of the reasons the device was slammed by users and tech journalists at the time of launch.
According to RIM’s BlackBerry blog and from other PlayBook users, the Bridge app can work without cellular tethering for which AT&T wants to charge users. It sounds like it is possible to pair a BlackBerry phone with the PlayBook via Bluetooth or Wi-Fi to enjoy the Bridge app’s functionality without paying AT&T a dime. (PlayBook can also pair with a non-BlackBerry phone but just won’t have access to BB-only software and data.) But it’s unclear (at least to me) if the Bridge Browser would still be blocked when the phone is tethered to the tablet by Bluetooth or Wi-Fi, or must the phone have the tether option to unlock the Bridge Browser function? Personally, I would refrain from surfing the Web while the RIM devices are connected.
AT&T customers who needed the Bridge app earlier probably already found a workaround by now, if not they would have moved onto the next tablet already. I wonder how many AT&T customers returned the PlayBook after they realized they couldn’t use their phone and tablet as advertised before today.



Recently one of my readers asked me how I felt about my prediction a year ago that dedicated e-readers were doomed to decline. This was before the Pew Internet & American Life Project reported that “The percent of U.S. adults with an e-book reader doubled from 6% to 12% between November 2010 and May 2011,” while “roughly the same percentage” of people were using tablets in May 2011 as had been using them in November 2010. You know what? I still feel good about my prediction.
You see, if you take a closer look at the Pew report, E-reader Ownership Doubles in Six Months (PDF Link) you’ll see that tablets still gained 3% more owners. True, the growth rate for tablets has slowed down some and e-book readers appear to be growing faster, but has it really.
You see I’m also on record as saying that the Android Linux-powered e-readers were quickly evolving into tablets. Like what tablets you ask? Try the Amazon Kindle and the Barnes & Noble’s Nook Color: they’re both powered by Android
The Nook Color is already an Android tablet. It runs Android 2.2. It also has a small, but growing number of Android applications includingFandango, Evernote and Seesmic and, a personal favorite of mine for reading news Pulse News.
While Amazon hasn’t announced that there’s a Kindle Tablet on its way, I know from numerous sources that one, or more, are on their way. Once I had a clearer idea what’s what with it, I’ll be reporting on what industry insiders have told me.
So, if anything, I’m surer than ever that the day of the dedicated e-reader is done-except at the bottom end-is done. Now, and then, why should companies bother to make devices that only let you read books when with Android it’s so easy to make these devices into full-scale tablets? I can’t think of a single good reason. Can you?


After 50 days of continuous assault on websites from corporations to government departments around the world, the six hackers known as LulzSec disbanded late last week but not without a parting gift.
Among the final release of leaked documents were ones from AT&T outlining its rollout of the LTE network as well as mention of the iPad 3 according to iFan.
iFan reports that in one document titled “2011 Weekly Calendar – LTE Milestones,” it said the “production launch will take place in July” and that ten more markets that were “promised LTE this year are on track to go live in September.” Verizon’s LTE network is already up and running so this information could very well be true.
Last week we told you that the next iPad is rumored to have an even higher resolution retina screen than the iPad 2, but if AT&T is rolling out a new network, the next iPad could very well be LTE-enabled according to iFan:
On a slide of a completely different PowerPoint presentation (pictured above), titled “LTE Status,” we see mentions of an iPad. This is where things get slightly more cryptic. Depending on how you interpret the message, it would seem as if AT&T is planning for an LTE iPad (probably the iPad 3, which is being rumored for a release either around March of next year, or this fall). Remember that this slide’s title is “LTE Status.” It wouldn’t make sense for a 3G iPad to be detailed on a page devoted to information on the 4Gstatus. With that in mind, this might confirm the rampant rumors of the iPad 3 being an LTE device. Given the timeline of the leaked information, it would also stand to reason that this new evidence points towards a March release, and not for the fall.
From what I can see in the leaked slide from AT&T, the carrier also makes mention of USB mobile broadband sticks and netbooks on the same “LTE Status” document so it seems the telecom will also be launching LTE-compatible devices to complement its handset offerings.
While we can’t confirm whether these leaked AT&T documents are up-to-date and contain reliable information considering that they were obtained illegally by hackers, the information contained in them certainly seem plausible.

India may conduct an inquiry against Apple following a complaint that the iPhone maker is breaching the competition laws of the country. The complaint lodged at the Competition Commission of India (CCI) states that Apple is curbing the customers' choice by restricting sale of the iPhone 4 through only two mobile operators – Bharti Airtel and Aircel. It further states that the software for the device can be downloaded only from the official Apple app store. The complainant also alleges that the Apple hardware can be serviced only at Apple stores.

AFP quotes a CCI official as saying the competition watchdog will examine the complaint and see if Apple is violating the laws. The CCI official, however, declined to divulge the details of the complaint. Apple, meanwhile, has said that it has not received any notice from the CCI and refused to comment further. The commission is likely to take up the matter later this week.
Apple has been selling its iPhone with exclusive operators since its launch in India, and most territories around the world. But in India, consumers are not yet very used to such contract-based devices. However, until operators offer more than a few devices on such contracts, we will never know if the Indian consumer actually likes or dislikes such deals - unless they have sufficient variety to choose from.

Apple's iPhone 4 was launched last month in India, almost after a year it was launched in the US. The phone came with services of two mobile operators Bharti Airtel and Aircel. The two operators have offered the latest iPhone with discounted data plans. The launch of iPhone 4 came months after the third-generation wireless spectrum was launched in India. The operators brought the iPhone 4 hoping to take advantage of the3G services.

Do you also think Apple has breached laws by restricting its devices to certain network operators? Let us know what you think in the comments


Here are some fun iPad features that a friend showed me last night. As per some of my previous iOS 5 tips, they’re tucked away in Settings > General > Accessibility. Below is the main Accessibility pane with Zoomand Triple-click Home annotated:
Zoom - Double-tap three fingers. Touch the Zoom setting in Accessibility to turn this one on (it’s off by default) and you can easily zoom in on an area on the iPad by double-tapping three fingers. This feature seems to have trickled down from Mac OS X’s System Preferences > Universal Access > Zoom and is great for giving demos to someone across the table or room.
The zoom itself is only one level deep (roughly 175%) and isn’t customizable. It zooms directly in on the area that you double-tapped and is reminiscent of double tapping to zoom in Mobile Safari on the iPhone. The zoom itself can’t be captured in a screenshot, but above are its settings.
Triple-clicking the Home button. Another fun setting hidden in Accessibility is the ability to map triple-clicking the Home button to one of four macros. In the screenshot above I have mine set to Toggle White on Black, a featured designed to help the visually impaired. I sometimes find black-on-white mode (pictured below) to be easier on my eyes for reading - especially at night.
Like the Zoom setting above, the black on white mode also trickled down from Mac OS X’s System Preferences > Universal Access > Display.
Since black-on-white mode isn’t screenshot-able, I’ve simulated it using Photoshop’s Image > Adjustments > Invert. Below is my normal iPad desktop, followed by it in black-on-white mode.


Undoubtedly, most of us have heard the phrase, “There’s an app for that,” whether it be serious or just in jest. But finding the app with the functionality we’re looking for might not be easy. Now Yahoo has an app for that.
In fact, Yahoo has built two apps for different platforms with the purpose of searching for iOS and Android apps. Both programs are touted as special (at least more than just search directly from a regular app store) as instead of promoting top selling apps first and foremost, Yahoo’s apps will offer personalized suggestions and “more precise results” based on matching app titles and related keywords.
The first one is Yahoo! App Search on the PC, which is a desktop-based program that is relatively straightforward. In fact, it works much like any other mobile app store such as the one seen in iTunes as well as the Android Market and the Amazon Appstore for Android.
However, Yahoo! App Search not charge the user but rather leads him/her to the source of the app, whether that be the iTunes App Store or the Android Market. Yahoo! also provides a QR code when applicable and the option to send the link directly to the user’s mobile device.
Then there’s the second option: Yahoo! AppSpot, a mobile search app for the iPhone, iPod touch and Android smartphones. This option is also free to use and works much like the desktop version. However, remember that when downloading apps on a smartphone, it could eat up your data plan when connected via 3G/4G.

Apple’s next OS - Mac OS X 10.7 ‘Lion’ will retail for $29.99. That’s cheap, but when you consider that you can install this on up to five different authorized systems, that brings the price of the OS down to $6. Compare this to an upgrade copy of Windows 7 Home Premium, which will set you back over $100.

Does Microsoft need to rethink its Windows upgrade pricing?



I think it does.

OK, first off, before all of you feel the need to point out to me that Apple is a company that sells a ‘product’ while Microsoft is in the software business, I’m already aware of that. However, bear in mind that most of Microsoft’s Windows revenue comes from sales of licenses to OEMs and businesses. Revenue from the sale of upgrades is a mere drop in the ocean. In many ways Microsoft makes its money from selling products much in the same way Apple does, except that Microsoft has a broader distribution base and gets the OEMs to do much of the hard sell.

Here’s the way I see it. There’s absolutely no reason whatsoever for Microsoft to still be charging over $100 for a retail upgrade. Even if you seek out an OEM version of Windows 7 Home premium (one that you can only install and activate on a single system, and where you don’t get any support) still costs over $80.

I know that Microsoft does offer family packs and steep discounts at times, but these are occasional and usually only used early on to bolster sales numbers in order to generate impressive numbers for press releases. This helps people who are quick enough to bag the deal, but leaves everyone out out in the cold.

In a world where there are free Linux distros and $30 Mac OS X installers that are good for up to five systems, the fact that Microsoft is still asking regular home users in the region of $100 for a single license of Windows 7 not only seems like a archaic, it’s also penalizing people who want to keep their old PC hardware but keep their OS up to date.

Microsoft should learn a few lessons from Apple. For example:

Cut upgrade prices aggressively. Realize the value of getting more people onto the latest platform.
Cutting out the middle-man and offering cheap Windows upgrades as direct downloads. Make the download process as easy as possible.
Offering multi-install upgrades for home users with multiple systems. $100 x multiple PCs soon becomes crazy-expensive for the home user.
Make discount upgrade packs permanent. Why rush people with ‘act, don’t think’ deals.
Come on Microsoft, you’ve been slapped across the face by Apple’s gauntlet, it’s time to step up and respond.

* source Zdnet


Edbott's Microsoft report
After nearly a decade, Microsoft’s reign as a monopoly is over.
The consent decree in U.S. v. Microsoft expired last month, officially removing Microsoft from antitrust scrutiny by the United States Department of Justice. And the latest real-world data on web usage confirms that Microsoft’s once-dominant position in the world of personal computing is crumbling.
For the past four years, I’ve collected semi-annual snapshots of web usage from Net Market Share. The data for the first half of 2011 tell an ominous story for Microsoft. See for yourself:
Data provided by > Net Market Share
For the first time since I’ve been recording this data, Microsoft’s share of web usage has dropped below the 90% mark—to 88.88% in April 2011.
That’s a reflection of the decline of the traditional PC and the increasing importance of mobile devices. People aren’t abandoning Windows for other traditional operating systems—OS X usage is flat, too, and desktop Linux still can’t crack the 1% level.
No, people are turning to mobile devices to do tasks that used to require a PC, and the iPad has been the biggest success in that role. In just over a year, it has grown from a microscopic market share to nearly 1% of all web traffic. And the iPhone continues to capture share as well, increasing from 0.53% to 1.23% over the past year.
Thanks to the potent one-two punch of the iPad and the iPhone, Apple continues to roll:
Data provided by > Net Market Share
When I looked at this data six months ago, I asked, “Are mobile devices like the iPhone and iPad taking over tasks that used to be done by PCs?” The answer is a resounding yes:
Data provided by > Net Market Share
By and large, these numbers don’t tell a great story for Microsoft. The company can take some small encouragement in the fact that the overall share for mobile devices is still small. That means it’s possible to overcome the late start. Android proved that a newcomer can make a dent, going from zero (literally) to roughly a third of the share of iOS over the past two years.
Six months ago, Microsoft CEO Steve Ballmer was asked to pick Microsoft’s riskiest bet. He answered, “The next version of Windows.”
Now that we’ve seen demos of Windows 8, it’s clear what he meant. With Windows 8, Microsoft is unifying its user experience across an entire range of devices, including traditional PCs, ARM-based tablets, smartphones, and the Xbox 360. The stakes are incredibly high, and there’s really only one chance to get it right. if Windows 8 flops on phones and tablets, Microsoft’s future is very dim indeed.
* Methodology: Net Market Share publishes snapshots of PC usage based on data from 160 million visits per month to its large collection of sites (the exact methodology is here). Its monthly reports on operating system versions contain a wealth of detailed information about even the most obscure OSes, and they’ve tracked the performance of mobile platforms consistently for the past four years. To compile the charts in this series of posts, I recorded data from the Operating System Market Share reports for desktop and mobile OSes at six-month intervals beginning in October 2007.
*source : Zdnet

Place an Ad