TECHZIE.BLOGSPOT.COM

Your TECH GADGET GURU



Apple’s newest iPhone devices have been hacked with a zero-day font vulnerability in the latest iteration of the JailbreakMe.com project.
The JailbreakMe.com exploit allows the automated jailbreaking of iPhone/iPad/iPod Touch devices from a specially created Web site.
It is essentially a drive-by download attack that exploits the way Apple’s mobile operating system processes certain fonts.  Technical details of the vulnerability are not yet know.
It is likely being combined with a second privilege escalation bug to escape the iOS sandbox, much like the first version of the jailbreakexploit.   According to “Comex,” the hacker behind the site, the exploit defeats ASLR (Address Space Layout Randomization), a key anti-exploit mechanism.
Along with the jailbreak exploit, “Comex” also released a patch for the main vulnerability.
“Due to the nature of iOS, this patch can only be installed on a jailbroken device.   Until Apple releases an update, jailbreaking will ironically be the best way to remain secure,” he explained.
On the issue of releasing exploit for zero-day flaws, here’s a note from the site’s FAQ:
I did not create the vulnerabilities, only discover them.  Releasing an exploit demonstrates the flaw, making it easier for others to use it for malice, but they have long been present and exploitable.  Although releasing a jailbreak is certainly not the usual way to report a vulnerability, it still has the effect of making iOS more secure in the long run.



Apple is rushing to fix a security hole found in its iOS mobile software following a stern warning from a German IT security department.
The Associated Press is reporting that Germany’s Federal Office for Information Security found that flaw stems from clicking on an infected PDF file, which “is sufficient to infect the mobile device with malware without the user’s knowledge.” That opens the door for the user’s passwords, emails, text messages, emails and almost anything else stored on the iPhone, iPad or iPod touch in question.
Apple’s response:
Apple Inc. spokeswoman Bethan Lloyd said Thursday the company is “aware of this reported issue and developing a fix that will be available to customers in an upcoming software update.”
Apparently this is damaging on “several versions” of iOS, but not all. The Guardian has cited specifics:
The problem may occur on iPhone 3GS, iPhone 4, iPad, iPad 2 and the iPod Touch with software versions including iOS 4.3.3, and it “cannot be excluded” that other iOS versions – including the iOS 5 due in September – have the same weakness, said the Bonn-based federal bureau.
The security gap was originally uncovered by a group of hackers trying to jailbreak an iPhone. Some third-parties who produce jailbreaking software have already posted patches. However, it appears that this problem, related to PDF files, is different from the recent zero-day font vulnerability found in JailbreakMe.com. That doesn’t necessarily mean they are unrelated, but just different.
Adrian Kingsley-Hughes reports, there is a debate over whether or not jailbroken iPhones and other iOS devices are actually safer or not. But a patch from Apple for this specific problem is still needed immediately.
All of this follows the recent discovery that Apple could also be a target of the AntiSec campaign, adding fuel to the theory that the Cupertino, Calif.-based company could be the “Holy Grail” for hackers.



Apple is rushing to fix a security hole found in its iOS mobile software following a stern warning from a German IT security department.
The Associated Press is reporting that Germany’s Federal Office for Information Security found that flaw stems from clicking on an infected PDF file, which “is sufficient to infect the mobile device with malware without the user’s knowledge.” That opens the door for the user’s passwords, emails, text messages, emails and almost anything else stored on the iPhone, iPad or iPod touch in question.
Apple’s response:
Apple Inc. spokeswoman Bethan Lloyd said Thursday the company is “aware of this reported issue and developing a fix that will be available to customers in an upcoming software update.”
Apparently this is damaging on “several versions” of iOS, but not all. The Guardian has cited specifics:
The problem may occur on iPhone 3GS, iPhone 4, iPad, iPad 2 and the iPod Touch with software versions including iOS 4.3.3, and it “cannot be excluded” that other iOS versions – including the iOS 5 due in September – have the same weakness, said the Bonn-based federal bureau.
The security gap was originally uncovered by a group of hackers trying to jailbreak an iPhone. Some third-parties who produce jailbreaking software have already posted patches. However, it appears that this problem, related to PDF files, is different from the recent zero-day font vulnerability found in JailbreakMe.com. That doesn’t necessarily mean they are unrelated, but just different.
As ZDNet’s Adrian Kingsley-Hughes reports, there is a debate over whether or not jailbroken iPhones and other iOS devices are actually safer or not. But a patch from Apple for this specific problem is still needed immediately.
All of this follows the recent discovery that Apple could also be a target of the AntiSec campaign, adding fuel to the theory that the Cupertino, Calif.-based company could be the “Holy Grail” for hackers.


After 50 days of continuous assault on websites from corporations to government departments around the world, the six hackers known as LulzSec disbanded late last week but not without a parting gift.
Among the final release of leaked documents were ones from AT&T outlining its rollout of the LTE network as well as mention of the iPad 3 according to iFan.
iFan reports that in one document titled “2011 Weekly Calendar – LTE Milestones,” it said the “production launch will take place in July” and that ten more markets that were “promised LTE this year are on track to go live in September.” Verizon’s LTE network is already up and running so this information could very well be true.
Last week we told you that the next iPad is rumored to have an even higher resolution retina screen than the iPad 2, but if AT&T is rolling out a new network, the next iPad could very well be LTE-enabled according to iFan:
On a slide of a completely different PowerPoint presentation (pictured above), titled “LTE Status,” we see mentions of an iPad. This is where things get slightly more cryptic. Depending on how you interpret the message, it would seem as if AT&T is planning for an LTE iPad (probably the iPad 3, which is being rumored for a release either around March of next year, or this fall). Remember that this slide’s title is “LTE Status.” It wouldn’t make sense for a 3G iPad to be detailed on a page devoted to information on the 4Gstatus. With that in mind, this might confirm the rampant rumors of the iPad 3 being an LTE device. Given the timeline of the leaked information, it would also stand to reason that this new evidence points towards a March release, and not for the fall.
From what I can see in the leaked slide from AT&T, the carrier also makes mention of USB mobile broadband sticks and netbooks on the same “LTE Status” document so it seems the telecom will also be launching LTE-compatible devices to complement its handset offerings.
While we can’t confirm whether these leaked AT&T documents are up-to-date and contain reliable information considering that they were obtained illegally by hackers, the information contained in them certainly seem plausible.


Here are some fun iPad features that a friend showed me last night. As per some of my previous iOS 5 tips, they’re tucked away in Settings > General > Accessibility. Below is the main Accessibility pane with Zoomand Triple-click Home annotated:
Zoom - Double-tap three fingers. Touch the Zoom setting in Accessibility to turn this one on (it’s off by default) and you can easily zoom in on an area on the iPad by double-tapping three fingers. This feature seems to have trickled down from Mac OS X’s System Preferences > Universal Access > Zoom and is great for giving demos to someone across the table or room.
The zoom itself is only one level deep (roughly 175%) and isn’t customizable. It zooms directly in on the area that you double-tapped and is reminiscent of double tapping to zoom in Mobile Safari on the iPhone. The zoom itself can’t be captured in a screenshot, but above are its settings.
Triple-clicking the Home button. Another fun setting hidden in Accessibility is the ability to map triple-clicking the Home button to one of four macros. In the screenshot above I have mine set to Toggle White on Black, a featured designed to help the visually impaired. I sometimes find black-on-white mode (pictured below) to be easier on my eyes for reading - especially at night.
Like the Zoom setting above, the black on white mode also trickled down from Mac OS X’s System Preferences > Universal Access > Display.
Since black-on-white mode isn’t screenshot-able, I’ve simulated it using Photoshop’s Image > Adjustments > Invert. Below is my normal iPad desktop, followed by it in black-on-white mode.


Undoubtedly, most of us have heard the phrase, “There’s an app for that,” whether it be serious or just in jest. But finding the app with the functionality we’re looking for might not be easy. Now Yahoo has an app for that.
In fact, Yahoo has built two apps for different platforms with the purpose of searching for iOS and Android apps. Both programs are touted as special (at least more than just search directly from a regular app store) as instead of promoting top selling apps first and foremost, Yahoo’s apps will offer personalized suggestions and “more precise results” based on matching app titles and related keywords.
The first one is Yahoo! App Search on the PC, which is a desktop-based program that is relatively straightforward. In fact, it works much like any other mobile app store such as the one seen in iTunes as well as the Android Market and the Amazon Appstore for Android.
However, Yahoo! App Search not charge the user but rather leads him/her to the source of the app, whether that be the iTunes App Store or the Android Market. Yahoo! also provides a QR code when applicable and the option to send the link directly to the user’s mobile device.
Then there’s the second option: Yahoo! AppSpot, a mobile search app for the iPhone, iPod touch and Android smartphones. This option is also free to use and works much like the desktop version. However, remember that when downloading apps on a smartphone, it could eat up your data plan when connected via 3G/4G.

Apple’s next OS - Mac OS X 10.7 ‘Lion’ will retail for $29.99. That’s cheap, but when you consider that you can install this on up to five different authorized systems, that brings the price of the OS down to $6. Compare this to an upgrade copy of Windows 7 Home Premium, which will set you back over $100.

Does Microsoft need to rethink its Windows upgrade pricing?



I think it does.

OK, first off, before all of you feel the need to point out to me that Apple is a company that sells a ‘product’ while Microsoft is in the software business, I’m already aware of that. However, bear in mind that most of Microsoft’s Windows revenue comes from sales of licenses to OEMs and businesses. Revenue from the sale of upgrades is a mere drop in the ocean. In many ways Microsoft makes its money from selling products much in the same way Apple does, except that Microsoft has a broader distribution base and gets the OEMs to do much of the hard sell.

Here’s the way I see it. There’s absolutely no reason whatsoever for Microsoft to still be charging over $100 for a retail upgrade. Even if you seek out an OEM version of Windows 7 Home premium (one that you can only install and activate on a single system, and where you don’t get any support) still costs over $80.

I know that Microsoft does offer family packs and steep discounts at times, but these are occasional and usually only used early on to bolster sales numbers in order to generate impressive numbers for press releases. This helps people who are quick enough to bag the deal, but leaves everyone out out in the cold.

In a world where there are free Linux distros and $30 Mac OS X installers that are good for up to five systems, the fact that Microsoft is still asking regular home users in the region of $100 for a single license of Windows 7 not only seems like a archaic, it’s also penalizing people who want to keep their old PC hardware but keep their OS up to date.

Microsoft should learn a few lessons from Apple. For example:

Cut upgrade prices aggressively. Realize the value of getting more people onto the latest platform.
Cutting out the middle-man and offering cheap Windows upgrades as direct downloads. Make the download process as easy as possible.
Offering multi-install upgrades for home users with multiple systems. $100 x multiple PCs soon becomes crazy-expensive for the home user.
Make discount upgrade packs permanent. Why rush people with ‘act, don’t think’ deals.
Come on Microsoft, you’ve been slapped across the face by Apple’s gauntlet, it’s time to step up and respond.

* source Zdnet


Edbott's Microsoft report
After nearly a decade, Microsoft’s reign as a monopoly is over.
The consent decree in U.S. v. Microsoft expired last month, officially removing Microsoft from antitrust scrutiny by the United States Department of Justice. And the latest real-world data on web usage confirms that Microsoft’s once-dominant position in the world of personal computing is crumbling.
For the past four years, I’ve collected semi-annual snapshots of web usage from Net Market Share. The data for the first half of 2011 tell an ominous story for Microsoft. See for yourself:
Data provided by > Net Market Share
For the first time since I’ve been recording this data, Microsoft’s share of web usage has dropped below the 90% mark—to 88.88% in April 2011.
That’s a reflection of the decline of the traditional PC and the increasing importance of mobile devices. People aren’t abandoning Windows for other traditional operating systems—OS X usage is flat, too, and desktop Linux still can’t crack the 1% level.
No, people are turning to mobile devices to do tasks that used to require a PC, and the iPad has been the biggest success in that role. In just over a year, it has grown from a microscopic market share to nearly 1% of all web traffic. And the iPhone continues to capture share as well, increasing from 0.53% to 1.23% over the past year.
Thanks to the potent one-two punch of the iPad and the iPhone, Apple continues to roll:
Data provided by > Net Market Share
When I looked at this data six months ago, I asked, “Are mobile devices like the iPhone and iPad taking over tasks that used to be done by PCs?” The answer is a resounding yes:
Data provided by > Net Market Share
By and large, these numbers don’t tell a great story for Microsoft. The company can take some small encouragement in the fact that the overall share for mobile devices is still small. That means it’s possible to overcome the late start. Android proved that a newcomer can make a dent, going from zero (literally) to roughly a third of the share of iOS over the past two years.
Six months ago, Microsoft CEO Steve Ballmer was asked to pick Microsoft’s riskiest bet. He answered, “The next version of Windows.”
Now that we’ve seen demos of Windows 8, it’s clear what he meant. With Windows 8, Microsoft is unifying its user experience across an entire range of devices, including traditional PCs, ARM-based tablets, smartphones, and the Xbox 360. The stakes are incredibly high, and there’s really only one chance to get it right. if Windows 8 flops on phones and tablets, Microsoft’s future is very dim indeed.
* Methodology: Net Market Share publishes snapshots of PC usage based on data from 160 million visits per month to its large collection of sites (the exact methodology is here). Its monthly reports on operating system versions contain a wealth of detailed information about even the most obscure OSes, and they’ve tracked the performance of mobile platforms consistently for the past four years. To compile the charts in this series of posts, I recorded data from the Operating System Market Share reports for desktop and mobile OSes at six-month intervals beginning in October 2007.
*source : Zdnet

Place an Ad