- apple-list - University of Manitoba Mailing Lists

INTEREST: in what may be an overreaction, HOME DEPOT "fires" Windows
by Wayne Billing 09 Nov '14

09 Nov '14

[The original attempts to break in to Home Depot computer systems were stymied by their firewalls. The attackers didn't focus on Home Depot directly; they focused on exploiting the computers of 3rd party contractors doing work within Home Depot buildings. The breaches began only when visiting contractors attached their own (already exploited) computers inside the Home Depot firewalls or when they given credentials to penetrate the firewalls from already exploited computers at the contractors home offices.] ....from: http://9to5mac.com/2014/11/09/home-depot-windows-breach-macbooks-iphones/ Home Depot blames security breach on Windows, senior executives given new MacBooks and iPhones<http://9to5mac.com/2014/11/09/home-depot-windows-breach-macbooks-iphones/> [Home Depot Windows] Earlier this week, The Wall Street Journal<http://online.wsj.com/articles/home-depot-hackers-used-password-stolen-from…> published an in-depth look at The Home Depot’s recent security breach<https://corporate.homedepot.com/mediacenter/pages/statement1.aspx> of its payment data systems, in which 56 million credit card accounts and 53 million email addresses of customers were compromised. A root cause of the security breach: a Windows vulnerability in the retailer’s main computer network. “Once inside Home Depot’s systems after gaining credentials from the outside vendor, the hackers were able to jump the barriers between a peripheral third-party vendor system and the company’s more secure main computer network by exploiting a vulnerability in Microsoft Corp.’s Windows operating system, the people briefed on the investigation said,” writes the WSJ’s Shelly Banjo. The report claims that while Microsoft did issue a security patch after the breach began, which was installed by The Home Depot, the fix arrived too late. According to sources familiar with the investigation, the hackers already had the ability to move across The Home Depot’s systems, including its point-of-sale system, as if they were high-level employees. The report unravels a lot of details related to how the security breach played out, with one anecdote that I found particularly interesting. Following the breach, an IT employee allegedly purchased two dozen new MacBooks and iPhones for senior executives at The Home Depot, indicating that the home-improvement retailer may have lost at least some confidence in its Microsoft-based systems. MacBooks and iPhones have faced their fair share of security vulnerabilities<http://9to5mac.com/2014/11/05/wirelurker-malware/> over the past few years, although recent studies conducted by Kaspersky Labs<http://securelist.com/analysis/kaspersky-security-bulletin/58265/kaspersky-…> and similar firms have proven that both devices remain highly secure platforms in terms of protection against malware and other threats. But whether shiny new Macs and iPhones in The Home Depot’s boardroom will help it prevent another massive security breach remains to be seen.

1 0

FYI: WSJ: Cheaptickets, Orbitz, others charging more per night for some users
by Wayne Billing 26 Oct '14

26 Oct '14

...from: http://online.wsj.com/articles/why-you-cant-trust-youre-getting-the-best-de… Why You Can’t Trust You’re Getting the Best Deal Online A Study Finds Discriminatory Pricing on E-Commerce Sites Is More Widespread Than Thought By ELIZABETH DWOSKIN Oct. 23, 2014 12:01 a.m. ET The Web is full of personalized content, whether it’s a Netflix <http://quotes.wsj.com/NFLX> recommendation or the results of a Google <http://quotes.wsj.com/GOOGL> search. But consumers have protested when e-commerce companies have extended their behind-the-scenes personalization to prices, charging different sums for the same goods, or pushing some people toward higher-priced offers. A new study of top e-commerce websites found these practices—called discriminatory pricing or price steering—are much more widespread than was previously understood. The study, by a team of computer scientists at Northeastern University, tracked searches on 16 popular e-commerce sites. Six of those sites used the pricing techniques; none of the sites alerted consumers to that fact. Among the study’s findings: Travel-booking sites Cheaptickets and Orbitz charged some users searching hotel rates an average $12 more per night if they weren’t logged into the sites, and Travelocity charged users of Apple <http://quotes.wsj.com/AAPL> Inc. ’s iOS mobile operating system $15 less for hotels than other users. Home Depot <http://quotes.wsj.com/HD> Inc. shows mobile-device users products that are roughly $100 more expensive than those offered to desktop-computer users. And Expedia <http://quotes.wsj.com/EXPE> and Hotels.com<http://Hotels.com> steer users at random to pricier products, the study said. “In the real world, there are coupons and loyalty cards, and people are fine with that,” said Christo Wilson, an assistant professor at Northeastern who led the research team. “Here, there’s a transparency problem. The algorithms change regularly, so you don’t know if other people are getting the same results.” Travelocity, a unit of Sabre <http://quotes.wsj.com/SABR> Corp. , didn’t respond to a request for comment. Home Depot didn’t dispute the accuracy of the findings, but the home-improvement retailer wasn’t “intentionally steering search results,” said company spokesman Stephen Holmes. [cid:FA861B28-A0EB-4290-BAB6-B101D0C1164E]ENLARGE Many factors could influence what a customer sees on the company’s sites, Mr. Holmes said, including prior browsing and purchase history, the location of the store, and whether the customer is on mobile or not. Home Depot didn’t charge users different prices for identical products but showed more-expensive products to people who shopped using a smartphone, the researchers found. Chris Chiames, vice president of corporate affairs at Orbitz Worldwide <http://quotes.wsj.com/OWW> Inc., said in an email that the company clearly advertises its loyalty programs and other deals. He said the discounts some members see on the site apply to just a small proportion of hotels—fewer than 5%. So, it wouldn’t make sense, and might even be misleading, to advertise lower prices to all members, he said. “The Northeastern study states that ‘overall, most of the experiments do not reveal evidence of steering or discrimination,’ and so we are curious as to why a handful of exceptions to searches on thousands of hotels is the basis of this paper’s conclusions, or even worthy of a story,” Mr. Chiames added. “Would you be as interested in a Kmart ‘blue light special’ deal that was made available to shoppers who happen to be in a certain store at a certain time?” Moreover, some deals are priced by Orbitz’s hotel partners, he added. “The hotel might have limited inventory of that price, and so they choose to display the rate on a more-limited basis, akin to the flash sale,” he said. On Orbitz and Cheaptickets, also owned by Orbitz Worldwide, consumers who registered through the websites’ free log-in were shown a tab labeled “members only” that offered lower hotel prices. The company didn’t advertise that users could receive discounts for logging in. Orbitz has been accused of price discrimination in the past. A 2012 Wall Street Journal investigation found the company charged Mac users as much as 30% more than PC users for a night’s lodging. The company discontinued the practice, which it characterized as a month-long experiment. The Northeastern researchers confirmed the company no longer discriminates between Mac and PC users. Expedia and Hotels.com<http://Hotels.com>, both units of Expedia Inc., don’t show different prices because of users’ differing characteristics but because the company constantly refines its pricing strategies using a method called A/B testing, the researchers said. Shoppers are randomly placed in a group that highlights either less or more costly hotels. “Either way, the user has no idea what bucket they’ve been placed in,” said Northeastern’s Mr. Wilson. WSJ.D WSJ.D<http://online.wsj.com/news/technology> is the Journal’s home for tech news, analysis and product reviews. * Why You Can’t Trust You’re Getting the Best Deal Online<http://online.wsj.com/articles/why-you-cant-trust-youre-getting-the-best-de…> * Facebook’s Zuckerberg Holds Q&A Session in Chinese<http://blogs.wsj.com/digits/2014/10/23/facebooks-mark-zuckerberg-holds-qa-s…> * Foxconn in Talks for China Display Plant<http://online.wsj.com/articles/foxconn-in-talks-for-china-plant-investment-…> * Nokia’s Bullish Outlook Is Evidence That Pain Is in the Past<http://online.wsj.com/articles/nokia-gives-bullish-outlook-as-it-swings-bac…> One group of users, for example, were shown an average hotel listing price of $187 a night. The other group saw prices that were $17, or roughly 10%, less. “Presenting different booking paths and options to different customers allows us to determine which features customers appreciate most” said Expedia spokesman Dave McNamee, in an email. “Pricing is not manipulated by Expedia.com<http://Expedia.com>.” Consumers have long protested price discrimination. In 2000, Amazon.com <http://quotes.wsj.com/AMZN> Inc. Chief Executive Jeff Bezos <http://topics.wsj.com/person/B/Jeff-Bezos/698> apologized for an internal research program in which consumers were shown different prices for identical products. He called the experiment a “mistake.” (Amazon and eBay Inc. weren’t included in the Northeastern study because those companies’ services have little power over the prices they charge, the researchers said.) Staples <http://quotes.wsj.com/SPLS> Inc. varied its online prices based on users’ locations, according to a 2012 article in The Wall Street Journal. The researchers didn’t examine Staples but pointed out that retailers might vary prices by region because the cost of procuring a given product can differ in different parts of the country. They didn’t study geographic variations for that reason. In their study, the Northeastern researchers devised a statistical method to weed out what they called “noise,” or legitimate factors that might cause prices to vary—a technique they hope will be used in future studies of online personalization. The research team recruited 300 beta users, who allowed the researchers to track their experience on different sites. The team also developed hundreds of fake accounts to see whether historical purchase patterns and clicks through the sites had an impact on price personalization. They didn’t examine the impact of consumers’ overall Web-browsing behavior on pricing because they would have no way to know how e-commerce sites tracked participants across the Web. Write to Elizabeth Dwoskin at elizabeth.dwoskin(a)wsj.com<mailto:elizabeth.dwoskin@wsj.com>

1 0

FYI: Microsoft Office for Mac patches: "fix critical issues"; "improve security"
by Wayne Billing 14 Oct '14

14 Oct '14

...from: http://www.microsoft.com/en-us/download/details.aspx?id=44329 [Office] Microsoft Office for Mac 2011 14.4.5 Update Select Language: Chinese (Simplified) Chinese (Traditional) Danish Dutch English Finnish French German Italian Japanese Norwegian (Bokmål) Polish Russian Spanish Swedish Download<http://www.microsoft.com/en-us/download/confirmation.aspx?id=44329> Close<http://www.microsoft.com/en-us/download/details.aspx?id=44329&6B49FDFB-8E5B…> This update fixes critical issues and also helps to improve security. It includes fixes for vulnerabilities that an attacker can use to overwrite the contents of your computer's memory with malicious code. * Details<http://www.microsoft.com/en-us/download/details.aspx?id=44329&751be11f-ede8…> Version: 14.4.5 File Name: Office2011-1445Update_EN-US.dmg Date Published: 10/14/2014 File Size: 113.6 MB This update fixes critical issues and also helps to improve security. It includes fixes for vulnerabilities that an attacker can use to overwrite the contents of your computer's memory with malicious code. For more information about this update, please visit the Microsoft Web site<http://go.microsoft.com/fwlink/?LinkId=511102>. Applies to: Office 2011, Office 2011 Home and Business Edition, Word 2011, Excel 2011, PowerPoint 2011, Outlook 2011, Office for Mac Standard 2011 Edition, Microsoft Office for Mac Home & Student 2011, and Microsoft Office for Mac Academic 2011 Known issues for installation of Office 2011<http://go.microsoft.com/fwlink/?LinkId=255462> * System Requirements<http://www.microsoft.com/en-us/download/details.aspx?id=44329&e6b34bbe-475b…> Supported Operating System Apple Macintosh, Mac OS X * Operating System Versions: Mac OS X version 10.5.8 or a later version of Mac OS Note To verify that your computer meets these minimum requirements, on the Apple menu, click About This Mac. * Microsoft Office for Mac 2011 Service Pack 1 (14.1.0): You can download this update for free from the Microsoft Web Site<http://go.microsoft.com/fwlink/?LinkId=218211>. Note To verify that you have installed this update, you can open any Microsoft Office 2011 application to check the version number. For example, open Word, and then on the Word menu, click About Word. In the dialog box, compare the version number next to Latest Installed Update.

1 0

FYI: Apple Begins Reminding About App-Specific Passwords
by Wayne Billing 08 Oct '14

08 Oct '14

...from: http://www.macrumors.com/2014/10/08/apple-reminds-app-specific/ Apple Begins Reminding Two-Factor Authentication Users About App-Specific Passwords Wednesday October 8, 2014 8:38 pm PDT by Husain Sumra Apple has begun emailing iCloud users who have enabled two-factor authentication on their Apple IDs, reminding them that application specific passwords will be required when trying to access iCloud data on third party apps starting tomorrow. [Screen Shot 2014-10-08 at 8.13.42 PM] In addition to the email reminders, Apple last week published a new support document<http://support.apple.com/kb/HT6186>educating users on how to use app-specific passwords. While the feature was originally intended to require the feature on October 1, it's unclear why two-factor authentication users are being reminded of it a week later. App-specific passwords are a new feature Apple introduced in mid-September<http://www.macrumors.com/2014/09/16/apple-app-specific-passwords/>, following the launch of two-factor authentication<http://www.macrumors.com/2014/09/16/icloud-two-factor-authentication/> for accessing iCloud.com<http://iCloud.com>. The changes arrived after a hacking incident that saw the iCloud accounts of several celebrities compromised due to weak passwords. CEO Tim Cook has promised<http://www.macrumors.com/2014/09/04/cook-security-alerts-icloud/> to improve iCloud security by increasing awareness around Apple's security features like two-factor authentication as well as a sending out email notifications<http://www.macrumors.com/2014/09/08/icloud-alert-emails-web/> whenever a device is restored, an account is accessed or a password change is attempted.

1 0

INTEREST: Interview with Apple's Jony Ive
by Wayne Billing 03 Oct '14

03 Oct '14

...from: http://www.vogue.com/1415025/apple-design-genius-jonathan-ive A Rare Look at Design Genius Jony Ive: The Man Behind the Apple Watch OCTOBER 1, 2014 8:00 AMby ROBERT SULLIVAN<http://www.vogue.com/contributor/robert-sullivan/>|photographed by DAVID SIMS<http://www.vogue.com/tag/photographer/david-sims/> * 0<https://plus.google.com/share?url=http%3A%2F%2Fwww.vogue.com%2F1415025%2Fap…> * 0<http://www.pinterest.com/pin/create/button/?url=http%3A%2F%2Fwww.vogue.com%…> * EMAIL<mailto:?body=http://www.vogue.com/1415025/apple-design-genius-jonathan-ive/…> * <http://www.vogue.com/1415025/apple-design-genius-jonathan-ive#> [Jonathan Ive] EXPAND Photographed by David Sims, Vogue, October 2014 How Apple’s under-the-radar design genius, Jonathan Ive, has found the way to our hearts. I first catch sight of Jony Ive across the Apple campus, in a plain Dodger-blue T-shirt and white painter’s pants, in conversation, nodding. The head Apple designer, who brought you the iMac and the iPad and now, the Apple Watch, has a nearly shaved head and a tightly trimmed beard. He’s not tall, not small, and looks as if he might be a formidable rugby opponent—though even from a distance he comes across as open and amenable, less likely to tackle you than to do what he is doing with a colleague at this very moment, which is listening. Ive has a calming presence, like the Apple campus itself, whose very address, Infinite Loop, lulls you into a sense of Zen-ness. In the courtyard, trays of beautiful food—grass-fed steaks and fresh-made curries and California-born hot sauces—lead Apple employees out toward the open-air seating, away from the white cafeteria that might be described as a luxurious spa for the terminally nerdy. White is the color of choice at Apple HQ as in the Apple product line. It is through this white, with its clarity, its dust-hiding lack of distraction, that you have already met Jonathan Ive. To the south of the cafeteria is a tiny amphitheater, an emotional site in Apple’s history: At the company’s 2011 memorial for Steve Jobs, Coldplay took the stage, as did Jony Ive. Ive is notoriously reluctant to give interviews, not to mention speak in public. But on that day he spoke for the man whom he called his dearest friend. For his part, Jobs, when he was alive, referred to Ive as his “spiritual partner.” “I think he better than anyone understood that while ideas ultimately can be so powerful,” Ive told the assembled mourners, “they begin as fragile, barely formed thoughts.” Another thing Jobs understood way back in 1997, the year he returned to the company that had kicked him out a decade earlier, was that Ive—then still in his 20s—was a designer with the background and the psychological tools not just to create the latest, hottest devices but also to orchestrate a team. Like cutting-edge steel, Ive is strong and persistent but flexible, and most crucial (most Jobs-ian, in fact), he is passionate about things, as in things, literally. “So much of my background is about making, physically doing it myself,” he says. In other words, the secret weapon of the most sought-after personal-electronics company in the world is a very nice guy from Northeast London who has a soft spot for woodworking and the sense that designers ought to keep their design talents backstage where they can do the most good. “There’s an odd irony here,” he observes. “I think our goal is that you would have a sense that it wasn’t design.” RELATED STORIES * [cid:E4F8D607-893C-4E35-BD2C-2AED5313E12E] The Small Miracle of the Apple Watch<http://www.vogue.com/2088983/apple-watch-october-2014-issue/> * The Apple Watch Has Landed: Will You Pick Up the Next Big Thing in Wearable Tech?<http://www.vogue.com/1342841/apple-watch-first-look/> When you sit down with Ive, he is eager to chat—too eager, maybe, for the Apple time-minders who are always looking around for him—and will take a while to respond to a question, smiling as he says, “This is going to be a kind of oblique answer. . . .” We are talking in a white room, distracted only by a black non-Apple television—itself a signpost to the question, When will Apple make TVs or whatever will replace them? Noticeably, his phone neither rings nor vibrates; he has designed the moment for concentration. He nurses a white mug of tea, and the only thing in the room besides an iPhone is the pair of reading glasses designed by his friend Marc Newson and tucked into the front of his T-shirt: simple, delicate, but clear and strong. “I wish I could articulate this more effectively,” he continues, addressing his ambitions as a designer. “But it is to have that sense that you know there couldn’t possibly be a sane or rational alternative.” Ive is obsessed over in design blogs, the sites that cover Apple as if it were the Vatican, following leaks and rumors and passing along hijacked photos of components or screens—pitching best guesses as to what Apple is working on next. One blog imagines what it would be like if Jony Ive designed—well, everything: “Jony Ive redesigns . . . freeway signage . . . Coke . . . the solar system.” You might spot the occasional photo of him out in the world—at the White House for a design award; in London being knighted, as he was two years ago, by Princess Anne; at a pizza dinner in San Francisco, sitting with Yahoo’s Marissa Mayer and various Silicon Valley execs. But one of the very natural settings for the real Jony Ive is a workshop at Apple HQ. It may be easier to sneak into a North Korean cabinet meeting than into the Apple design studio, the place where a small group of people have all the tools and materials and machinery necessary to develop things that are not yet things. Reportedly Ive’s wife, Heather Pegg, has never been—he doesn’t even tell her what he’s working on—and his twin sons, like all but a few Apple employees, are not allowed in either. Work is conducted behind tinted windows, serenaded by the team’s beloved techno music, a must for the boss. “I find that when I write I need things to be quiet, but when I design, I can’t bear it if it’s quiet,” he says. Indeed, the design team is said to have followed an unwritten rule to move away from their work whenever the famously brusque Jobs entered the studio and turn up the volume so as to make his criticisms less audible, less likely to throw them off course. In 1985, the year Jobs was forced out of Apple, Jony Ive was in design school in England, struggling with computers, blaming himself. “Isn’t that curious?” he says now. “Because if you tasted some food that you didn’t think tasted right, you would assume that the food was wrong. But for some reason, it’s part of the human condition that if we struggle to use something, we assume that the problem resides with us.” Despite that initial obstacle, Ive seems to have been born to understand industrial design. He grew up in Chingford, on the outskirts of London near Epping Forest, a good place for a city kid who liked to play in the trees. His father, Michael Ive, is a silversmith, and his grandfather was an engineer. When Ive was a boy, his father worked with the British government to develop and set the standards for design education. When he made things with his son—a toboggan, say—he would demand that Jony sketch his design before commencing construction. As for the tree house Ive designed back then, guess what? Today he is critical. “I’d do it differently.” His eyes light up as he says it, and you fully believe, in that moment, that he would happily drop everything to walk outside and work on it now. In high school, Ive studied sculpture and chemistry, and in 1985 he enrolled in the design program at Newcastle Polytechnic, where he became known as passionately detail-oriented, creating dozens of models of a hearing aid to be used by deaf children and their teachers. By the time he was out of school and working for a small design consultancy (called, coincidentally, Tangerine), a project he took on for Apple impressed the Cupertino company. They recruited him in 1992. Five years later, a disenchanted Ive was about to leave when Jobs returned to reboot the then-floundering Apple, which happened, by most analyses, when Jobs enabled Ive. By Ive’s account, the two hit it off immediately. “It was literally the meeting showing him what we’d worked on,” Ive says, “and we just clicked.” Ive talks about feeling a little apart, like Jobs. “When you feel that the way you interpret the world is fairly idiosyncratic, you can feel somewhat ostracized and lonely”—big laugh here—“and I think that we both perceived the world in the same way.” Design critics now look back at the birth of the Jobs-Ive partnership as the dawn of a golden age in product design, when manufacturers began to understand that consumers would pay more for craftsmanship. Together Jobs and Ive centered their work on the notion that computers did not have to look as if they belonged in a room at NASA. The candy-colored iMac—their first smash hit—felt to consumers like a charming friend, revolutionary but approachable, and appealed to both men and women. “I think what we sincerely try to do is create objects and products and ideas that are new and innovative,” says Ive, “but at the same time there is a slightly peculiar familiarity to them.” The iMac was followed by laptops in cool brushed titanium, then white laptops. Apple was treating computers and media devices as tools, as more than just wires and RAM shoved in a box; they were not so much minimal devices as devices that coordinate functions. And then came the iPod and the iPhone, an invention like a divining rod, tapping into invisible streams of information. Throughout, Ive has refined Apple’s design process, which, he argues, is almost abstract in its devotion to pure idea: Good design creates the market; ideas are king. And here’s the next irony that defines Ive’s career: In the clutter of contemporary culture, where hits and likes threaten to overtake content in value, the purity of an idea takes on increasing currency. “I think now more than ever it’s important to be clear, to be singular,” he says, “and to have a perspective, one you didn’t generate as the result of doing a lot of focus groups.” Developing concepts and creating prototypes leads to “fascinating conversations” with his team, says Ive. “It’s a process I’ve been practicing for decades, but I still have the same wonder.” For someone whose influence on our lives is so huge, responsible not just for shifting whole economies but for changing the way we interact, Ive is extraordinarily low-profile. “He’s a virtually unknown British character who became a central person in the explosion of the Internet,” says his friend the Hong Kong–born businessman David Tang. “It’s amazing that he’s not more widely talked about.” On the Silicon Valley social circuit, he’s an anomaly. “The technology industry tends to feature people with big personalities who like to talk about their achievements,” says Trevor Traina, a fifth-generation San Franciscan entrepreneur who is a friend and neighbor of the Ives. “Jony is humble and private, and he doesn’t wear his achievements on his sleeve.” Ive lives in the Pacific Heights neighborhood with his wife and sons. “Heather is a writer,” he says. “She’s a creative too. We met at high school. I got married when I was 21, and I’m 47. Married a long time. Isn’t it cool?” Their house, bought two years ago for $17 million, is by the storied architectural firm Polk & Co.—Willis Polk oversaw the design of San Francisco’s Palace of Fine Arts, which opened in 1915. Like his own father, Ive seems adamant about intention at home. “My boys are ten, and I like spending time with them doing stuff that I did, which is drawing and making things—real things, not virtual things,” he says. Easygoing Ive morphs into Serious Ive on this point: He sees design schools failing their students by moving away from a foundation in traditional skills. “I think it’s important that we learn how to draw and to make something and to do it directly,” he says, “to understand the properties you’re working with by manipulating them and transforming them yourself.” Perhaps it is this drive to understand design with his own hands that keeps Ive grounded. “He’s not distracted by any veneer of glamour,” says Tang, who remarks on his friend’s thoughtfulness. On a recent birthday, Tang received two finely crafted wooden boxes containing large, engraved, Ive-designed ashtrays—Tang loves cigars—constructed from the next-generation iPhone material. “It was like getting the monolith in 2001: A Space Odyssey,” Tang says. Ive likes nothing better than to come up with mischievously inventive ways to use the technology at his fingertips. When a presenter from Blue Peter—Britain’s longest-running children’s TV show, known for encouraging kids to craft utilitarian designs from household objects—came to present him with its highest honor, a gold Blue Peterbadge depicting a ship in full sail, Ive was delighted. In repayment, he fired up a Mikron HSM 600U, a computer-controlled machine that can cut up a chunk of aluminum like an origami flower, and in a mere ten hours created a Blue Peterbadge that looked a lot like a not-so-distant cousin of the MacBook Air. His attention to detail is famous among his friends. Traina likes to joke with him that he couldn’t imagine being Ive’s contractor, since nothing would escape his notice. “One time I showed him a 1920s Cartier crystal, platinum, and diamond pocket watch that had been my father’s,” Traina recalls. “He took a quick look and later referred to the way the crystal was beveled, something I didn’t even remember.” Ive’s personal design tastes include the Castiglionis’ Snoopy lamp and “another Castiglioni that’s a parabolic glass that sits quite low.” He likes his suits custom-made by British tailor Thomas Mahon, and might show up in one on the charity circuit—at the Mid-Winter Gala, for instance, at a table with Marissa Mayer and Alexis and Trevor Traina; the Ives also cochaired the benefit for Tipping Point Community, an anti-poverty group in San Francisco. Ive commutes what used to be 45 minutes and can now be an hour and a half, no matter whether he is driving an Aston Martin or a Bentley or a Land Rover, a fleet of cars that the British press watches like Apple’s stock price. He takes a vacation once in a while, often in London, setting up in a suite at Claridge’s while his family visits with the family of Marc Newson, the Australian designer who has remade everything from cars to furniture to restaurants to first-class lounges for Qantas. When he and Newson relax, they do so by attempting to switch work off—tough to do when you design the world—though designers out for a drink will inevitably allow the poorly designed world to seep in. “Shit we hate,” says Newson, includes American cars. “It’s as if a giant stuck his straw in the exhaust pipe and inflated them,” he adds, “when you look at the beautiful proportions in other cars that have been lost.” The two also relax working, as they did recently on behalf of their mutual friend Bono, whose recent auction of Ive- and Newson-curated goods raised $13 million for (Red), Bono’s charity to stop AIDS. The list included Ettore Sottsass’s Olivetti typewriter; a Dieter Rams hi-fi (Rams himself showed up at New York’s Sotheby’s that Saturday night last fall); an Airstream trailer; and a Leica that Newson and Ive lovingly tweaked together. “We didn’t even have to vocalize our pet hates, we were so in tune,” Newson says. “We only have to look at the object and look at each other and our eyes roll.” It’s a collaboration that is now a lock, apparently, since Apple recently announced that Newson would join Ive’s design team to work on special projects. “They’re a bit like non-identical twins separated at birth,” jokes Bono. They finish each other’s sentences. “They finish each other’s food,” adds Bono. “The kind of emotional and physical attraction people develop with Apple products shouldn’t really be possible, but take a look around you.” Friends marvel as Ive shifts from the guy cracking jokes to the solemn Sir Jonathan Ive. “Jony is deadly serious,” says Bono, who first met Ive when Jobs dispatched him to an Irish pub to salvage a U2–Apple iPod promotion. “He is also serious fun to be around. When you go out for a pint with Jony, it’s kind of like going for a pint with the future, which is cool except you know he’s not telling you what they’ve really got planned.” Feels nice, doesn’t it?” On my second visit to Cupertino, Ive has finally handed it over: the new Apple Watch. It is more watch than the computer geeks would ever have imagined, has more embedded software than in a Rolex wearer’s wildest dreams. When Ive shows it to me—weeks before the product’s exhaustive launch, hosted by new CEO Tim Cook—in a situation room that has us surrounded by guards, it feels like a matter of national security. Yet despite all the pressure, he really just wants you to touch it, to feel it, to experience it as a thing. And if you comment on, say, the weight of it, he nods. “Because it’s real materials,” he says proudly. Then he wants you to feel the connections, the magnets in the strap, the buckle, to witness the soft but solid snap, which he just loves as an interaction with design, a pure, tactile idea. “Isn’t that fantastic?” At the beginning of our sitdown, he is slightly flustered at the attempt to condense all that went into the device into a single conversation. “It’s strange when you’ve been working on something for three years . . .” he says, shaking his head. He describes the trajectory of clocks to watches: from a public clock in a Bavarian square to timepieces owned by royalty, to military chronometers, to the watch’s arrival, only at the beginning of the twentieth century, on the wrist. “It’s fascinating how people struggled with wearing this incredibly powerful technology personally.” The cell phone, of course, killed the watch to some extent. Now he wants to reset the balance. The Apple Watch is designed in three collections, with myriad variations, from elegantly luxurious to a brightly colored sporty version. On the back, LEDs emit light through sapphire-crystal windows, and photodiodes convert that light into a signal that algorithms use to calculate your heart rate. Got that? All of this syncs with your iPhone, making the watch the wrist-bound control tower of your life in tech. Monitor your heart rate or your movement in general. Tap to have Siri take a message, or send a voice reply. Pay for drinks with your wrist (Apple Pay will be, yes, Apple Watch–compatible). With this product, Apple is moving from your desk and your pocket onto your person, your pulse point. The watch underscores the fact that Ive is first and foremost a masterly product designer; technology almost comes second. It’s a beautiful object, a device you might like even if you don’t like devices. “Everything we’ve been trying to do,” he says, “it’s that pursuit of the very pure and very simple.” Aside from all the ways the watch connects to your phone, Ive is very interested in how the watch can connect to another human. “You know how very often technology tends to inhibit rather than enable more nuanced, subtle communication?” he asks. This is the question that haunts the son of a craftsman: Is he making tools that improve the world or shut people down? “We spent a lot of time working on this special mechanism inside, combined with the built-in speaker” —he demonstrates on his wrist. You can select a chosen person, also wearing the watch, and transmit your pulse to them. “You feel this very gentle tap,” he says, “and you can feel my heartbeat. This is a very big deal, I think. It’s being able to communicate in a very gentle way.” Whether it is ultimately judged to be a big deal or another distraction remains to be seen. Either way, Ive eventually leaves the guarded room with his secrets intact for a few more weeks, passing through the bright white corridors decorated with long views of the Santa Cruz Mountains and a poster-like portrait of Steve Jobs holding up a Mac during one of his famous hard sells—the trademark bold product introduction, the late CEO’s big loud pitch. As you watch Ive walk off, politely thanking people, you recall that he closed up his private presentation by asking you to listen closely to a watchband as it is pulled off and then reconnected. “You just press this button and it slides off, and that is just gorgeous,” he was saying. He encouraged you to pause. “But listen as it closes,” he said. “It makes this fantastic k-chit.” He was nearly whispering. And when he said the word fantastic, he said it softly and slowly—“fan-tas-tic!”—as if he never wanted it to end. This is perhaps Ive’s greatest achievement: not that we can get our email more readily, but that we can stop to notice a small, quiet connection.

1 0

INTEREST: JPMorgan hack exposed data of 83 million, among biggest breaches in history
by Wayne Billing 02 Oct '14

02 Oct '14

"Six months [before the attack, Target] began installing a $1.6 million malware detection tool made by the computer security firm FireEye (FEYE), whose customers also include the CIA and the Pentagon. Target had a team of security specialists in Bangalore to monitor its computers around the clock. If Bangalore noticed anything suspicious, Target’s security operations center in Minneapolis would be notified. On Saturday, Nov. 30, the hackers had set their traps and had just one thing to do before starting the attack: plan the data’s escape route. As they uploaded exfiltration malware to move stolen credit card numbers—first to staging points spread around the U.S. to cover their tracks, then into their computers in Russia—FireEye spotted them. Bangalore got an alert and flagged the security team in Minneapolis. And then … Nothing happened. For some reason, Minneapolis didn’t react to the sirens. Target employees familiar with the company’s data security operation, as well as eight people with specific knowledge of the hack and its aftermath, including former employees, security researchers, and law enforcement officials. The story they tell is of an alert system, installed to protect the bond between retailer and customer, that worked beautifully. But then, Target stood by as 40 million credit card numbers—and 70 million addresses, phone numbers, and other pieces of personal information—gushed out of its mainframes." - http://www.businessweek.com/articles/2014-03-13/target-missed-alarms-in-epi… Missed Alarms and 40 Million Stolen Credit Card Numbers: How Target Blew It http://www.businessweek.com/articles/2014-03-13/target-missed-alarms-in-epi… Home Depot security hack: What to do if your cards are breached http://www.cbc.ca/news/business/home-depot-security-hack-what-to-do-if-your… JPMorgan hack exposed data of 83 million, among biggest breaches in history http://www.reuters.com/article/2014/10/02/us-jpmorgan-cybersecurity-idUSKCN… JPMorgan hack exposed data of 83 million, among biggest breaches in history Thu Oct 2, 2014 7:15pm EDT (Reuters) - Names, addresses, phone numbers and email addresses of the holders of some 83 million households and small business accounts were exposed when computer systems at JPMorgan Chase & Co<http://www.reuters.com/finance/stocks/overview?symbol=JPM&lc=int_mb_1001> (JPM.N<http://www.reuters.com/finance/stocks/overview?symbol=JPM.N>) were recently compromised by hackers, making it one of the biggest data breaches in history. The bank revealed the scope of the previously disclosed breach on Thursday, saying that there was no evidence that account numbers, passwords, user IDs, birth dates or Social Security numbers had been stolen. It added that it has not seen "unusual customer fraud" related to the attack which exposed contact information for 76 million households and 7 million small businesses. The people affected are mostly account holders, but may also include former account holders and others who entered their contact information at the bank’s online and mobile sites, according to a bank spokeswoman. Security experts outside of the bank warned that the breach could result in an increase in crime as scammers will likely attempt to use the stolen information to engage in various types of fraud. The bank's customers should be on heightened alert for fraud, said Mark Rasch, a former federal cyber crimes prosecutor. "All of this data is useful to hackers and identity thieves," he said. "The kind of information that was stolen is not sensitive itself, but is frequently used to validate people's identities." Tal Klein, vice president with the cybersecurity firm Adallom, said that the breach could undermine confidence in the security of banks and other companies that people assume are well protected from hackers. "Criminals could literally take on the identities of these 83 million businesses and people. That's the biggest concern," he said. "Until now the assumption has been that the companies that get breached are the ones that have poor security practices, but we know that JPMorgan had a good security program and that they invest heavily in this area," he said. "So what we are waking up to is that the fundamental nature of security is broken." Still, JPMorgan advised customers on its website that it does not believe they need to change their passwords or account information. Company spokeswoman Patricia Wexler said that the bank is not offering credit monitoring to its customers because no financial information, account data or personally identifiable information was compromised. At the end of August, JPMorgan said it was working with U.S. law enforcement authorities to investigate a possible cyber attack. As with home break-ins, it can take victims of data attacks months to discover what, if anything, is missing. (Reporting by Tanya Agrawal in Bangalore, David Henry in New York and Jim Finkle<http://blogs.reuters.com/search/journalist.php?edition=us&n=jim.finkle&> in Boston.; Editing by Ted Kerr<http://blogs.reuters.com/search/journalist.php?edition=us&n=ted.kerr&> and Bernard Orr<http://blogs.reuters.com/search/journalist.php?edition=us&n=bernard.orr&>)

1 0

FYI: Apple's Commitment to Privacy
by Wayne Billing 24 Sep '14

24 Sep '14

Apple Inc. is providing new web pages that lay out how your information, location, and transactions has been increased by Apple, iOS 8, and Yosemite. See how you can make best use of these extra protections: http://www.apple.com/privacy/ http://www.apple.com/privacy/privacy-built-in/ http://www.apple.com/privacy/manage-your-privacy/ http://www.apple.com/privacy/government-information-requests/ http://www.apple.com/privacy/privacy-policy/ ....you should also keep in mind that not many 3rd party (non-Apple Inc.) apps do not yet take advantage of the Apple supplied technology and may not fully encrypt/protect/etc. your information: Wayne Billing Classroom Technology Support Audio Visual and Classroom Technology Support Computer and Network Support 130 Machray Hall Building 204-474-6649 204-807-3153 (cell) 204-474-7625 (fax) Wayne_Billing(a)umanitoba.ca<mailto:Wayne_Billing@umanitoba.ca>

1 0

FYI: iOS8, iPhone 4s, & iPad2: Wait?
by Wayne Billing 18 Sep '14

18 Sep '14

...from: http://arstechnica.com/apple/2014/09/ios-8-on-the-iphone-4s-performance-isn… iOS 8 on the iPhone 4S: Performance isn’t the (only) problem New OS wants screen space and processing power that the old phone doesn't have. by Andrew Cunningham<http://arstechnica.com/author/andrew_cunningham/> - Sept 17 2014, 8:26am CDT * Share<https://www.facebook.com/sharer.php?u=http%3A%2F%2Farstechnica.com%2Fapple%…> * Tweet<https://twitter.com/share?text=iOS+8+on+the+iPhone+4S%3A+Performance+isn%E2…> 129<http://arstechnica.com/apple/2014/09/ios-8-on-the-iphone-4s-performance-isn…> [cid:D5339AF5-E24F-42BA-9DA5-9F64A95DB65C]<http://cdn.arstechnica.net/wp-content/uploads/2014/09/IMG_0052.jpg> Enlarge<http://cdn.arstechnica.net/wp-content/uploads/2014/09/IMG_0052.jpg> / The iPhone 4S. I remember when this was the one that made my old phone feel slow. Andrew Cunningham iPhones have about a year to be top-of-the-line. Then they have a year to be the modest-but-capable midrange model. After that, they become the free-with-contract choice. And then, in their last year, they enter that no-man's-land where they're still getting software updates but are no longer being sold. 2014 is the year the iPhone 4S was told to pack up its things and move to the retirement home. As a going away present, Apple gave it iOS 8<http://ars.to/1rZUgRC>, which in all likelihood will be the last major version upgrade it gets. For the last two years, we've taken the oldest phone supported by each new iOS update and looked at what you stand to gain (and lose) by installing the update. We were impressed by iOS 6 on the iPhone 3GS<http://arstechnica.com/apple/2012/09/tempting-fate-installing-ios-6-on-the-…>, but iOS 7 on the iPhone 4<http://arstechnica.com/apple/2013/09/new-lease-on-life-or-death-sentence-io…> came with some serious compromises. The 4S has stayed pretty speedy over the years, but how does iOS 8 treat it? Missing features The iPhone 4S gets many of iOS 8's biggest additions, including support for extensions and most of the improvements to Apple's built-in applications. That said, it's missing out on several features that depend on newer hardware: * AirDrop * TouchID * Handoff for applications, though iPhone call forwarding to other devices works fine * Support for OpenGL ES 3.0<https://developer.apple.com/library/ios/documentation/DeviceInformation/Ref…>, the Metal graphics API, and 64-bit ARMv8 apps In addition to that list, keep in mind that the iPhone 4S is much slower than any other iPhone Apple currently sells. It uses 2.4GHz-only 802.11n Wi-Fi, lacks LTE, and uses an Apple A5 chip that only offers about a quarter the raw performance of the Apple A7 in the iPhone 5S (the A8 in the iPhone 6 and 6 Plus widens this gap yet further). iOS 8 doesn't leave the iPhone 4S behind, but you'll pick up quite a few features by moving to something newer. 3.5 inches is not that many [cid:C3F70C0E-8265-46D9-934C-04B740A9278B]<http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-13-2-09-09-…> Andrew Cunningham Spotlight suggestions can fit one or two results at best. 1. [cid:90B65383-A73E-4050-B234-4C88D95E2194] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-13-2-09-09-…> 2. [cid:83B10552-2A40-4933-AF1D-8F541261FE63] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-13-2-12-39-…> 3. [cid:ADC477B2-8A92-481F-82EA-344C8489AC33] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-13-11-29-57…> 4. [cid:6E7C37F6-07F3-4E23-BC65-35C7BBAED0E2] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-13-2-21-48-…> 5. [cid:9DBBFC10-B180-4694-B53B-CA6040AAA940] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-13-2-21-30-…> 6. [cid:11B6DA24-F813-485E-8387-64CB4FE457B3] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-13-2-13-22-…> FURTHER READING [cid:311149A2-3E96-4AA3-9CC6-2D118672BE0A]<http://arstechnica.com/apple/2013/09/new-lease-on-life-or-death-sentence-io…> NEW LEASE ON LIFE OR DEATH SENTENCE? IOS 7 ON THE IPHONE 4<http://arstechnica.com/apple/2013/09/new-lease-on-life-or-death-sentence-io…> Apple's single-core A4 is really beginning to show its age. The iPhone 4S was Apple's last to use the original 3.5-inch iPhone screen size, which is now the smallest of four different phone screens that Apple supports. iOS 8's new stuff is all about fitting more information on those larger screens, whether we're talking about predictive typing, new Mail sorting options, Notification Center widgets, or Spotlight suggestions. The 4S' screen has always been small, but iOS 8 can make it feel cramped. Look at the Mail app, for example: you give up one strip of horizontal screen space to fit the typing suggestions and another strip at the top to show that Mail compose "windows" can be minimized to let you dig through the rest of your inbox. Both features work on the iPhone 4S, but they also leave you with only a very small bit of screen for what you're writing. If you don't mind (or actively prefer) your 4S' screen size, by all means, continue to enjoy it. You'll just have to do more scrolling than you do on and iPhone 5 or an iPhone 6. Needs more speed We want to open this section by saying that iOS 8 on the iPhone 4S is nowhere near as bad as iOS 7 on the iPhone 4. That OS ran so slowly and looked so different on the iPhone 4 than it did on any other device that it was obvious the hardware was struggling to keep up. The iPhone 4S made the jump to iOS 7 relatively gracefully, though, and it's fine with rendering all of the fancy transparency and translucency effects. We were expecting speed to stay roughly the same in the jump from iOS 7 to iOS 8, more or less as it did when we moved from iOS 5 to iOS 6 on the 3GS. Testing some application launch times under both operating systems reset those expectations. APPLICATION IOS 7.1.2 IOS 8.0 GM Safari 1.25 seconds 2.16 seconds Camera 1.5 seconds 1.8 seconds Settings 0.95 seconds 1.25 seconds Mail 0.91 seconds 1.30 seconds Messages 1.73 seconds 1.83 seconds Calendar 0.8 seconds 1.25 seconds Cold boot 36.4 seconds 39.8 seconds Each app was launched, timed with a stopwatch until it was ready for user input, then force-closed and opened again two more times; the speeds above are averages of those times. Again, we're not looking at an iPhone 4-level situation here, but iOS 8 can add as much as 50 percent more time to the same task compared to iOS 7. As you can read in our main iOS 8 review<http://arstechnica.com/apple/2014/09/ios-8-thoroughly-reviewed/>, browser benchmarks are a little bit faster and battery life is about the same, but speed does take a hit. The other problem is something that's not so easily measurable: animations on the Apple A5 SoC are markedly more choppy and inconsistent in iOS 8 than they ever were in iOS 7, something we confirmed by jumping back and forth between OSes a couple of times to make sure we weren't imagining things. Ars Culture Editor Casey Johnston confirmed that she was seeing the same kind of behavior on her iPad 2<http://arstechnica.com/apple/2014/09/a-slide-into-obsolescence-ios-8-on-the…>, and the non-Retina iPad Mini I have for testing was also choppy. It's odd, because although the applications themselves have added features, the GPU shouldn't really be working harder to render stuff in iOS 8 than it had to in iOS 7. The most common problem is dropped frames during animations, which doesn't create slowness so much as it gives the impression of slowness. You'll see these whether you're looking at big sweeping animations (opening a new tab in Safari) or smaller, more subtle ones (hitting "send" on a text in Messages). Occasionally, though, a hitch in animation would actually slow the whole device down, and it would sometimes hesitate to respond to input in a way that it didn't before. The iPhone 4's severe performance problems were addressed to some degree by the iOS 7.1 update<http://arstechnica.com/apple/2014/03/ios-7-1-on-the-iphone-4-as-good-as-its…>, and we're hoping to see the same done for older devices under iOS 8. Should you upgrade? [cid:A496584D-4DD5-45A4-B4DC-335C03FDDD8D]<http://cdn.arstechnica.net/wp-content/uploads/2014/09/IMG_0050.jpg> Enlarge<http://cdn.arstechnica.net/wp-content/uploads/2014/09/IMG_0050.jpg> Andrew Cunningham Despite the problems we ran into, we think the answer for most people will still be "yes." And if you happen to be using an iPhone 5 or iPhone 5C, the next-newest iOS 8 devices, go ahead and upgrade without fear; we didn't notice any of the same speed problems on those phones that we did on the 4S. iOS 8 is a big update, and it comes with a lot of big features. Although the iPhone 4S misses out on Handoff, it can still run extensions like widgets and third-party keyboards, two things iOS users have been awaiting for a long time now. By holding off on iOS 7, you were mostly just missing out on a redesign, but with iOS 8 there's good stuff here that you're going to want if you can get it. Ideally you wouldn't have to trade features for performance, but in our opinion getting the new stuff is worth putting up with the small slowdowns you'll experience. If you'd prefer to play it safe and wait for a future 8.0.1 or 8.1 update to improve performance on older devices, that's fine too—we hope that Apple makes it a priority as it continues to work on iOS 8. -== -=-=-== -= -= -= -= -= -= -= -= -= -= -= -= -= -= -= -= -= -=- = -= -= -= -= -= -= -= -= -= -= -= -= - ...from: INFINITE LOOP / THE APPLE ECOSYSTEM<http://arstechnica.com/apple/> A slide into obsolescence: iOS 8 on the iPad 2 It didn't seem like 6 could be worse than 7, but 7 to 8 is a different story. by Casey Johnston<http://arstechnica.com/author/caseyjohnston/> - Sept 17 2014, 8:29am CDT * Share<https://www.facebook.com/sharer.php?u=http%3A%2F%2Farstechnica.com%2Fapple%…> * Tweet<https://twitter.com/share?text=A+slide+into+obsolescence%3A+iOS+8+on+the+iP…> 98<http://arstechnica.com/apple/2014/09/a-slide-into-obsolescence-ios-8-on-the…> [cid:406DD54B-92AD-482C-A892-58B0BF4DE5A2] iOS 8 doesn't make a huge difference, visually, save a few small points. In case you've been so content with your iPad 2 over the last few years that you've drifted away from paying attention to the Apple product cycle, here is some six-month-old news: Apple finally stopped selling the iPad 2 model back in March. After it hung on at the bottom of the tablet product line for a couple of years to be a rock for the education and corporate markets, Apple kicked the iPad 2 out and resurrected the iPad 4 as the new full-size budget model. But for now, Apple is continuing to update the iPad 2, in part because it has so much in common with the non-retina iPad mini, including the Apple A5 processor and 1024x768 display. But the iPad 2 hung around so long because it's also a legacy device. There are students depending on updates, as well as companies who used the iPad as a default device, like Square. iOS 7 didn't do a whole lot of damage to the iPad 2, and even improved it in some aspects, like how fast the browser could load webpages. But this time around, the new version of iOS 8 appears to make the start of a much bigger decline, not only in performance, but in appearance. Where we miss out, and what goes wrong FURTHER READING [cid:D129D789-CD64-4A62-9B15-84F07CF194A0]<http://arstechnica.com/apple/2014/09/ios-8-thoroughly-reviewed/> IOS 8, THOROUGHLY REVIEWED<http://arstechnica.com/apple/2014/09/ios-8-thoroughly-reviewed/> A big, developer-centric update completes the overhaul started in iOS 7. There were some features added to iOS 7<http://arstechnica.com/apple/2013/09/dont-let-me-down-apple-ios-7-on-the-ip…> that were not available on the iPad 2, and iOS 8 adds to this list<https://www.apple.com/ios/whats-new/>: * Apple Health * Handoff features in Continuity * TouchID * Support for OpenGL ES 3.0<https://developer.apple.com/library/ios/documentation/DeviceInformation/Ref…>, the Metal graphics API, and 64-bit ARMv8 apps. The last time we wrote about an iOS transition, we noted that the bolder version of the OS-wide font helped everything look slightly better on the iPad 2's non-retina screen. With the font changes in iOS 8, though, this is no longer good advice—the bold font looks fat and unwieldy, especially on the everpresent clock time at the top of the screen and on the keyboard. Fortunately, Apple seems to have beefed up the standard font a bit in places where it needs it, so switching to bold is no longer necessary. [cid:EAF69CB2-5525-4B8C-853B-AE09E1729FA1]<http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-16-1-38-07-…> Bold text on iOS 7.1.2... 1. [cid:481989F7-79DF-4732-94BF-35965143CACD] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-16-1-38-07-…> 2. [cid:737637CA-DFC4-470B-BCFE-10C7DB379586] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-16-1-39-39-…> 3. [cid:547E5D01-53E0-474D-9CB4-87483C4E4FF4] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-16-1-39-50-…> 4. [cid:90BED20E-C2C1-49BD-8136-7B6B92E2D2C1] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-16-1-41-35-…> 5. [cid:B4381E3F-E204-42AD-BFB7-5DCBC92A04A7] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-16-2-25-19-…> 6. [cid:6B22B8D8-B4B0-4A55-92A7-83024A88326F] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-16-2-26-22-…> 7. [cid:44A4E194-DB8A-4F6D-8758-C4A0D8D8CDF8] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-16-2-25-25-…> 8. [cid:1AAD2D33-7232-41ED-A61F-515D53101511] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/Photo-Sep-16-2-26-28-…> In addition to font problems, the iPad 2 also still doesn't get any of the watercolor translucency effects Apple introduced iOS 7. Generally, iOS 8 is noticeably slower and choppier than iOS 7, in everything from opening apps to typing. Back when we switched from iOS 6, we complained about how we could get 10 characters into typing something before the keyboard realized what was happening. This problem has returned with a force in iOS 8, especially on first opening an app. Screen rotation is stuttery, and any time some part of the OS needs to slide into place (text centering, apps minimizing), it can't do it smoothly. To quantify the difference in performance, we tried opening several stock apps on each version of the OS, as well as cold-booting to the lock screen. APPLICATION IOS 7.1.2 IOS 8.0 GM Safari 1.07 seconds 1.81 seconds Camera 1.01 seconds 1.04 seconds Settings 1.16 seconds 1.63 seconds Mail 1.60 seconds 2.61 seconds Messages 0.92 seconds 1.19 seconds Calendar 0.97 seconds 1.48 seconds Cold boot 29.12 seconds 31.53 seconds IOS 7 was overall slower at opening apps than iOS 6 last year, but a lot of the difference could be attributed to the sweeping and slow animations that Apple introduced between the two versions. Even after Apple expedited the animations in newer versions of iOS 7, iOS 8 is still one half to a full second slower to complete certain tasks than iOS 7 on the iPad 2. Cold boots take a couple seconds longer, too. None of these opening times are huge roadblocks, but they add up to a noticeable poky feeling that wasn't there (or wasn't as strong) coming from iOS 7. [cid:C2488662-189A-455E-BB04-21174FF28B02]<http://cdn.arstechnica.net/wp-content/uploads/2014/09/charts.005.png> 1. [cid:E353F12D-DFB6-4452-A455-9603A331198B] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/charts.005.png> 2. [cid:2532D096-F72C-4106-A026-45E24E4489CC] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/charts.006.png> 3. [cid:F239B316-1F55-4745-968F-CAEA7744F44D] <http://cdn.arstechnica.net/wp-content/uploads/2014/09/charts.007.png> Surprisingly, the browser performance on iOS 8 is marginally better than on iOS 7 according to benchmarks. iOS 8 barely edges out 7 in Kraken, but it loses out in running SunSpider. The iPad 2 could not run Google Octane v2 on iOS 8 without crashing, but when we ran v1 on both versions, iOS 8 beat iOS 7 by a solid margin. FURTHER READING [cid:3C588B9A-B832-4803-A91E-93F9F1BE37E7]<http://arstechnica.com/apple/2014/09/ios-8-on-the-iphone-4s-performance-isn…> IOS 8 ON THE IPHONE 4S: PERFORMANCE ISN’T THE (ONLY) PROBLEM<http://arstechnica.com/apple/2014/09/ios-8-on-the-iphone-4s-performance-isn…> New OS wants screen space and processing power that the old phone doesn't have. Experientially, though, iOS 8 feels like it reloads tabs and reacts to input slower than iOS 7 did. Because of all the reloads, browsing is a disjointed experience with either version. Do I upgrade, or not? Last year our attitude toward the iOS 6-to-7 upgrade was "how much worse can things get," and it turns out we'd never find out. iOS 7 stayed roughly on par with 6 in terms of performance. After that experience, we could advocate for an upgrade with few reservations. But now, iOS 8 has convinced us that things can, in fact, be worse. Not a whole lot worse, and not all the time, but it's enough of a regression with few enough upsides that acquiescing to the "download software update" prompts may actually be a bad idea. FURTHER READING [cid:DDEA7E11-3447-4EC6-85AD-89DDC6E1AE7E]<http://arstechnica.com/apple/2013/09/dont-let-me-down-apple-ios-7-on-the-ip…> DON’T LET ME DOWN, APPLE: IOS 7 ON THE IPAD 2<http://arstechnica.com/apple/2013/09/dont-let-me-down-apple-ios-7-on-the-ip…> The A5 processor is less of a problem than the sad non-retina display. With that course of action comes some caveats: opting out of software updates can be risky from a security standpoint. There is also the possibility that later versions will become more stable, so closing your device off permanently may not be the best decision in the long run. It is possible, though not strictly sanctioned, to roll back to iOS 7 from 8 if you do want to give it a try but are worried you'll find it lacking. Ultimately, the iPad 2 is still our couch Internet-surfing device, occasionally a night-reading device. We don't demand much at all from it in terms of performance and expect it's the same for others who are still using this model a full three and a half years after it came out. This means that upgrading to iOS 8 won't ruin the experience; then again, neither would just staying on iOS 7.

1 0

FYI: "Android Browser flaw a privacy disaster for half of Android users"
by Wayne Billing 16 Sep '14

16 Sep '14

...from: http://arstechnica.com/security/2014/09/android-browser-flaw-a-privacy-disa… Android Browser flaw a “privacy disaster” for half of Android users Bug enables malicious sites to grab cookies, passwords from other sites. by Peter Bright<http://arstechnica.com/author/peter-bright/> - Sept 16 2014, 6:00pm CDT * Share<https://www.facebook.com/sharer.php?u=http%3A%2F%2Farstechnica.com%2Fsecuri…> * Tweet<https://twitter.com/share?text=Android+Browser+flaw+a+%E2%80%9Cprivacy+disa…> 60<http://arstechnica.com/security/2014/09/android-browser-flaw-a-privacy-disa…> [cid:6B50831D-9AD1-474E-90A9-49648DA366F2] Thanks to a bug in the Android Browser, your cookies aren't safe. Surian Soosay<https://www.flickr.com/photos/ssoosay/5762345557/in/photolist-9Mcwzt-46PRKe…> A bug quietly reported on September 1 appears to have grave implications for Android users. Android Browser, the open source, WebKit-based browser that used to be part of the Android Open Source Platform (AOSP), has a flaw that enables malicious sites to inject JavaScript into other sites. Those malicious JavaScripts can in turn read cookies and password fields, submit forms, grab keyboard input, or do practically anything else. Browsers are generally designed to prevent a script from one site from being able to access content from another site. They do this by enforcing what is called the Same Origin Policy (SOP): scripts can only read or modify resources (such as the elements of a webpage) that come from the same origin as the script, where the origin is determined by the combination of scheme (which is to say, protocol, typically HTTP or HTTPS), domain, and port number. The SOP should then prevent a script loaded from http://malware.bad/ from being able to access content at https://paypal.com/. The Android Browser bug breaks the browser's handling of the SOP. As Rafay Baloch, the researcher who discovered the problem<http://www.rafayhackingarticles.net/2014/08/android-browser-same-origin-pol…> found, JavaScript constructed in a particular way could ignore the SOP and freely meddle with other sites' content without restriction. This means that potentially any site visited in the browser could be stealing sensitive data. It's a bug that needs fixing, and fast. As part of its attempts to gain more control over Android<http://arstechnica.com/gadgets/2013/10/googles-iron-grip-on-android-control…>, Google has discontinued the AOSP Browser. Android Browser used to be the default browser on Google, but this changed in Android 4.2, when Google switched to Chrome. The core parts of Android Browser were still used to power embedded Web view controls within applications, but even this changed in Android 4.4, when it switched to a Chromium-based browser engine. But just as Microsoft's end-of-life for Windows XP didn't make that operating system magically disappear from the Web, Google's discontinuation of the open source Browser app hasn't made it disappear from the Web either. As our monthly look at Web browser usage shows<http://arstechnica.com/information-technology/2014/09/august-growth-puts-wi…>, Android Browser has a little more real-world usage than Chrome for Android, with something like 40-50 percent of Android users using the flawed browser. The Android Browser is likely to be embedded in third-party products, too, and some Android users have even installed it on their Android 4.4 phones because for one reason or another they prefer it to Chrome. Google's own numbers paint an even worse picture. According to the online advertising giant<https://developer.android.com/about/dashboards/index.html>, only 24.5 percent of Android users are using version 4.4. The majority of Android users are using versions that include the broken component, and many of these users are using 4.1.x or below, so they're not even using versions of Android that use Chrome as the default browser. Baloch initially reported<https://github.com/rapid7/metasploit-framework/pull/3759#issuecomment-55638…> the bug to Google, but the company told him that it couldn't reproduce the problem and closed his report. Since he wrote his blog post, a Metasploit module has been developed to enable the popular security testing framework to detect the problem, and Metasploit developers have branded the problem a "privacy disaster<https://community.rapid7.com/community/metasploit/blog/2014/09/15/major-and…>." Baloch says that Google has subsequently changed its response, agreeing that it can reproduce the problem and saying that it is working on a suitable fix. Just how this fix will be made useful is unclear. While Chrome is updated through the Play Store, the AOSP Browser is generally updated only through operating system updates. Timely availability of Android updates remains a sticking point<http://arstechnica.com/gadgets/2014/08/the-state-of-android-updates-whos-fa…> for the operating system, so even if Google develops a fix, it may well be unavailable to those who actually need it. Users of Android 4.0 and up can avoid much of the exposure by switching to Chrome, Firefox, or Opera, none of which should use the broken code. Other third-party browsers for Android may embed the broken AOSP code, and unfortunately for end users, there's no good way to know if this is the case or not.

1 0

INTEREST: Apple's Tim Cook interviewed on Charlier Rose
by Wayne Billing 15 Sep '14

15 Sep '14

"Between zero and two hundred and fifty..." ...from: http://gizmodo.com/tim-cook-on-user-privacy-at-apple-youre-not-our-produ-16… http://www.youtube.com/watch?v=Bmm5faI_mLo http://www.charlierose.com/watch/60444569 [cid:D119CACF-7295-41B8-83C3-F860FC761B32] Tim Cook Says Apple Has Never Shared Data: "You're Not Our Product"<http://gizmodo.com/tim-cook-on-user-privacy-at-apple-youre-not-our-produ-16…> Profile<http://alissawalker.kinja.com/>Follow<http://gizmodo.com/tim-cook-on-user-privacy-at-apple-youre-not-our-produ-16…> [cid:15C3A2EB-4AE3-4E73-A34C-8E2F59ADDDBF]<http://alissawalker.kinja.com/> Alissa Walker<http://alissawalker.kinja.com/> Filed to: APPLE PAY<http://gizmodo.com/tag/apple-pay> * APPLE<http://gizmodo.com/tag/apple> * TIM COOK<http://gizmodo.com/tag/tim-cook> * CHARLIE ROSE<http://gizmodo.com/tag/charlie-rose> * PRISM<http://gizmodo.com/tag/prism> * DATA<http://gizmodo.com/tag/data> * DATA MINING<http://gizmodo.com/tag/data-mining> * PRIVACY<http://gizmodo.com/tag/privacy> * IPHONE 6<http://gizmodo.com/tag/iphone-6> Today 7:30pm<http://gizmodo.com/tim-cook-on-user-privacy-at-apple-youre-not-our-produ-16…> As part of Apple's ongoing glasnost campaign, Tim Cook was on Charlie Rose last Friday<http://gizmodo.com/tim-cook-talks-icloud-hack-iphone-6-and-more-with-cha-16…>. Part two airs tonight and it looks like it will be a lot meatier, just based on the clip released today<https://www.youtube.com/watch?v=Bmm5faI_mLo&feature=youtu.be>: Cook will apparently talk more about the role of privacy at Apple, including their choice not to release or mine user metadata. "When we design a new service, we try not to collect data," Cook says in regards to how they structured Apple Pay to protect delicate user information like credit card numbers. "We're not reading your email. We're not reading your iMessage. If the government laid a subpoena on us to get your iMessage, we can't provide it. It's encrypted and we don't have the key." He goes on to slam other tech companies for handing over information to the government, seeming to particularly point a finger companies like Yahoo, which was supposedly coerced into joining PRISM<http://gizmodo.com/the-nsa-was-going-to-fine-yahoo-250k-a-day-if-it-didnt-1…><http://gizmodo.com/the-nsa-was-going-to-fine-yahoo-250k-a-day-if-it-didnt-1…>. No one has ever been granted access to Apple's data, says Cook. "We would never do that. They would have to cart us out in a box before we would do that."

1 0