- apple-list - University of Manitoba Mailing Lists

FYI: iCloud, Google I/O, & GoogleDrive storage: 1 TB: was $120/year; new pricing: now $120/year
by Wayne Billing 25 Jun '14

25 Jun '14

Apple just had their yearly get together for developers called the "World Wide Developers Conference" (WWDC) which saw a raft of announcements including "iCloud Drive" and a change in their "cloud storage" pricing: for example, 20 GB for $12 per year and $50 per year will get you 200 GB in iCloud. (1 TB pricing has not yet been announced.) "iCloud Drive" will, of course, work with the new CONTINUITY features of 10.10 and iOS 8: https://www.apple.com/ca/ios/ios8/continuity/ Google's annual developer get together (called "I/O") is on this week and they, too, have announced new pricing for their cloud storage called Google Drive. 1 TeraByte of Google Drive storage used to cost $120 per year. Under the new pricing 1 TeraByte is priced at $120 per year............ oh. Well, while that is the truth that isn't the whole truth ..... if you are a company getting Google Drive for your employees (more than 5 employees, actually) http://www.google.com/enterprise/apps/business/pricing.html) your annual fee of $120 per employee gets you "Unlimited" Google Drive storage...... Oh.......... oh, ya, and it seems you need to enrol your company and employees in the "Google Apps for Business plan". The "Google Apps for Business plan" gets you all the online "Google Apps for Business": [cid:3465D8D4-F732-4131-BB4D-1A6BF5ABB8A0] [cid:C8069529-0C3A-4E1D-B3DB-737C108DF828] http://www.google.com/enterprise/apps/business/products.html Wayne

1 0

INTEREST: iOS 7's Activation Lock Feature Helping Reduce iPhone Theft in Three Major Cities
by Wayne Billing 19 Jun '14

19 Jun '14

...from: http://bits.blogs.nytimes.com/2014/06/19/antitheft-technology-led-to-a-dip-… Antitheft Technology Led to a Dip in iPhone Thefts in Some Cities, Police Say By BRIAN X. CHEN<http://bits.blogs.nytimes.com/author/brian-x-chen/> JUNE 19, 2014 12:01 AM 4 Comments [Police officers in San Francisco and London say that after Apple last fall introduced a safety measure, called Activation Lock, iPhone theft fell significantly.]Larry W. Smith/European Pressphoto AgencyPolice officers in San Francisco and London say that after Apple last fall introduced a safety measure, called Activation Lock, iPhone theft fell significantly. Updated with additional reporting on kill switch plans for Google and Microsoft. For several years, cellphone theft has been a growing epidemic worldwide. But the police in New York, San Francisco and London say they are finally starting to see a dip in thefts of one of the most popular smartphones. The reason? The attorney general of New York, Eric T. Schneiderman, and the district attorney of San Francisco, George Gascón, share the theory that phone thefts are dropping because of Apple’s addition of a so-called kill switch, a type of antitheft technology, in its iPhone in September. Police officers in San Francisco and London say that after Apple introduced its measure, called Activation Lock, last fall, iPhone theft fell significantly. Comparing data in the six months before and after Apple released the feature, the police said iPhone robberies in San Francisco dropped 38 percent, and those in London fell 24 percent. The police in New York said that robberies involving Apple products dropped 19 percent and those involving grand larcenies dropped 29 percent in the first five months of 2014, compared with the same time period from 2013. A kill switch is software that lets consumers lock down a phone after the device has been reported stolen; users can reactivate the phone only with the correct password or personal identification number. Police have said that this type of antitheft technology could discourage criminals from stealing smartphones. Microsoft on Thursday said<http://blogs.technet.com/b/microsoft_on_the_issues/archive/2014/06/19/micro…> that it, too, will introduce a kill switch in a future software update for its Windows Phone operating system. Google will also be introducing one in the next version of Android, said Matt Kallman, a Google spokesman. “The introduction of kill switches has clearly had an effect on the conduct of smartphone thieves,” Mr. Schneiderman said in an interview. “If these can be canceled like the equivalent of canceling a credit card, these are going to be the equivalent of stealing a paperweight.” Other factors could have contributed to the decrease in iPhone thefts. For one, the police and tech companies have tried harder over the last year to educate consumers on additional security measures to protect phones, like setting up passcodes, which can make it harder to gain access to devices so that they can be erased and resold. Over the last year, several lawmakers across the country have pushed for stronger antitheft features on smartphones. In May, Minnesota became the first state to require a kill switch on all smartphones. In California last month, senators passed a bill<http://bits.blogs.nytimes.com/2014/05/08/with-a-change-of-heart-california-…>requiring phones sold in the state to include the antitheft technology. That bill still requires approval from the governor of California, Jerry Brown. San Francisco’s district attorney, Mr. Gascón, has been one of the most vocal supporters of a kill switch. He and Mr. Schneiderman collaborated to form the Secure Our Smartphones initiative to press businesses to create a technical way to dissuade thieves from stealing phones. Mr. Gascón said plenty of work remained. He said he hoped all manufacturers would include a kill switch turned on by default on all smartphones so consumers did not have to figure out how to use it. In the iPhone, for example, it is not turned on by default. “Many consumers might not be tech-savvy enough to do this,” Mr. Gascón said. He added that he still thought it was necessary for there to be laws requiring kill switches in phones, similar to how seat belts eventually became legally required inside cars.

1 0

FYI: arrest made in "Locking and Ransoming Apple Devices"
by Wayne Billing 19 Jun '14

19 Jun '14

...from: http://www.macrumors.com/2014/06/09/australia-device-hackers-arrested/ Hackers Involved in Locking and Ransoming Apple Devices in Australia Arrested Monday June 9, 2014 10:37 am PDT by Juli Clover Two weeks ago, hackers hijacked several iOS and Mac devices in Australia, remotely locking them via iCloud and demanding a ransom from the owner to get the device unlocked. "Device locked by Oleg Pliss," read the hijacker's message, along with a demand for $50 to $100. Quite a few users were affected and while early speculation suggested iCloud may have been hacked, Apple confirmed<http://www.macrumors.com/2014/05/28/apple-denies-icloud-hack/> that iCloud was not compromised, and that hackers had instead gained access to Apple IDs and passwords, likely through other site breaches where they used similar credentials. [australian_ios_device_hacked] The two hackers behind the attacks have now been detained by Russian authorities, reportsThe Sydney Morning Herald<http://www.smh.com.au/digital-life/consumer-security/hackers-who-held-apple…>. The hackers - aged 17 and 23 - were detained in the course of "operational activities" by the Russian Interior Ministry, Russia's Ministry of Internal Affairs said. They are both residents of the Southern Administrative District of Moscow and one has already been tried before, it said. According to Russian site MKRU<http://www.mk.ru/incident/2014/06/09/kibermoshenniki-shantazhirovali-rossiy…> [Google Translate<http://translate.google.com/translate?hl=en&sl=&tl=en&u=http%3A%2F%2Fwww.mk…>), the two hackers were caught after appearing on camera withdrawing a victim's ransom money from an ATM. The site also confirms the hackers gained access to Apple IDs and passwords via phishing pages and social engineering techniques, then used that information to lock devices. Russian users were also affected, which led to the investigation. One method of obtaining login information involved a pre-owned account filled with movies and music that was sold to an unsuspecting victim. Once the person linked their own details with the account, it was vulnerable to being hijacked. During the attacks, users who had passcodes enabled on their devices were able to bypass the hack, but those who had not previously set a passcode were out of luck, requiring a full reinstall of iOS. Apple recommends using a passcode with iOS devices, as well as two-step authentication, which can help thwart attacks like this one.

2 2

FYI: Android changes updates; might more easily expose private data
by Wayne Billing 11 Jun '14

11 Jun '14

...from: Android no longer reveals app permission changes in automatic updates Change could heighten security risks for users. by Dan Goodin<http://arstechnica.com/author/dan-goodin/> - June 11 2014, 10:11am CDT * ANDROID<http://arstechnica.com/discipline/android> * HARDENING<http://arstechnica.com/discipline/hardening> 61<http://arstechnica.com/security/2014/06/android-no-longer-reveals-app-permi…> [cid:B3933F94-CCCA-46F6-B996-4B40A40F7C32] Yoav F<https://secure.flickr.com/photos/yoav85/6231910409/> [New automatic Android app updates means users could miss a change in the permissions - such as permission to text message or permission to track - that app has on your device.] Previously, automatically updated apps displayed explicit details when a new version gained additional privileges. For example, an app that previously tracked only coarse GPS coordinates would warn users if an update would begin receiving fine coordinates. Similarly, a newly assigned ability to send SMS messages would also be disclosed. Under changes implemented through the latest Play store app, neither new privilege is displayed if a user has previously accepted any other permission in the same category as the new permission. In other words, by accepting one permission from a category, users agree that every other permission in that category can be added without notification in future updates. The change is an attempt by Google to streamline and simplify the process of installing updates. Rather than providing lengthy details many users likely don't understand, the new permission disclosure is much less verbose. Permissions are indicated only by a very general category such as Location, SMS, or Contacts/Calendar. Users who want to track precisely how a permission may have changed must click the category to see if specific new capabilities have been added. As a result, an app update that replaces coarse location with fine location simply shows the location category. End users must manually drill down to learn of the change. "I'd call it a step sideways," Marc Rogers, principal security researcher at Android antimalware provider Lookout, said of the change. "It definitely doesn't improve anything and it introduces some new risks, but I do think it addresses a couple of other issues." As an example, he said, suppose an updated app acquires the right to view photos. "I'm not sure users are well equipped to understand the full risk that each category could represent. I doubt as a user I would understand that the implication of that is I'm also giving someone permission to format my SD card. So there is a risk that users who have auto update on will not see this new permission of 'format the SD card' come in and somebody could do something malicious." The changes have been the topic of sometimes vigorous debate on reddit threads here<http://www.reddit.com/r/Android/comments/27n7yr/what_latest_changes_to_play…>, here<http://www.reddit.com/r/Android/comments/27gsqn/how_to_find_the_hidden_new_…>, andhere<http://www.reddit.com/r/Android/comments/27g33v/security_warning_android_pl…>. Users who object to the changes should consider disabling automatic updates<https://support.google.com/googleplay/answer/6014972#update>. That can be done by opening the Google Play app and switching to the settings view. Auto updating can be set for all apps or just some of them. Google has more details about the permission changes here<https://support.google.com/googleplay/answer/6014972?hl=en>.

1 0

INTEREST: iOS8: feature: randomizes MAC address while scanning
by Wayne Billing 09 Jun '14

09 Jun '14

...from: http://9to5mac.com/2014/06/09/ios-8-randomizes-mac-address-while-scanning-w… iOS 8 randomizes MAC address while scanning WiFi, blocks marketers tracking you<http://9to5mac.com/2014/06/09/ios-8-randomizes-mac-address-while-scanning-w…> [WiFi-Mac-Address-iOS-8] One iOS 8 feature Apple hasn’t talked about much is its ability to randomize the device’s MAC address<http://www.reddit.com/r/apple/comments/27n6cy/ios_8_randomises_the_mac_addr…> while scanning for WiFi networks. In iOS 8, Wi-Fi scanning behavior has changed to use random,locally administered MAC addresses… The MAC address used for Wi-Fi scans may not always be the devices real (universal) address… Once the iOS device is done scanning it will give the real MAC ID. This appears to be a security and privacy precaution as marketing and analytics companies routinely use this unique identifier to collect data about nearby devices scanning for WiFi networks. The New York Times published<http://www.nytimes.com/2013/07/15/business/attention-shopper-stores-are-tra…> a story last year about a similar experiment at Nordstrom and several marketing companies selling data to retailers and more use the same method of picking up the MAC address from devices scanning for WiFi networks. One of those companies, Euclid Analytics<http://euclidanalytics.com/privacy/statement/?_ga=1.96730975.1797034683.139…>, explains how it currently uses the MAC address of iPhones to help clients. While it notes “the MAC address does not disclose the device owner’s real-world identity nor any other personal data,” it also uses the data it collects to help clients “improve store layouts, determine timing for promotions and sales, measure the effects of advertising, and set staffing levels and store hours.” These marketing companies do the same for Samsung and Android devices, which also do not currently automatically randomize the MAC address, but it looks like Apple might put an end to that with iOS 8.

1 0

FYI: WWDC Keynote and iOS HEALTH app
by Wayne Billing 08 Jun '14

08 Jun '14

Apple's annual World Wide Developer Conference (WWDC) was held this week and, while the KEYNOTE address and sessions have been available only to developers in the past, this year the Keynote was webcast for anyone to watch: http://www.apple.com/apple-events/june-2014/ It's quite long (about 2 hours) so here's a quick synopsis of what will be introduced for OS X and iOS this fall: http://www.wired.com/2014/06/tldr-all-the-news-you-need-from-wwdc/ http://www.engadget.com/2014/06/02/apple-wwdc-2014-liveblog/ One of the announcements that might have a big impact on how people monitor their health was Apple's HealthKit (for developers) and the HEALTH app for users: https://www.youtube.com/watch?v=Gg_SYnw3-vA http://www.cnet.com/products/apple-health/

1 0

FYI Important: Set Passcodes on your devices
by Wayne Billing 29 May '14

29 May '14

Safer passwords, unique passwords across services, set passcodes for devices that support them...... ...from: http://9to5mac.com/2014/05/26/australian-mac-and-ios-users-find-devices-rem… Australian Mac and iOS users find devices remotely locked, held for ransom (and how to keep yours safe)<http://9to5mac.com/2014/05/26/australian-mac-and-ios-users-find-devices-rem…> [1401164873077.jpg] The Sydney Morning Herald reports that several Australian Mac, iPhone, and iPad users are finding that their devices have been locked remotely through Apple’s Find My iPhone service by someone using the name “Oleg Pliss.” The hacker (or hackers) then demand payments of around $50 to $100 to an anonymous PayPal account in order to restore the devices to their owners. An active thread on Apple’s support forum was started yesterday as users started to discover that they had been targeted by the attack. According to that discussion, users are finding all of their devices locked at once rather than a single device per user. Based on that report and the fact that Find My iPhone is being used to hold the devices hostage, it seems likely that the perpetrator has gained access to these users’ iCloud accounts—possibly through password reuse by those users—rather than some device-specific malware or hack. Because the hackers used Find My iPhone to lock out the victims, users who had set a passcode on their devices were able to regain access. This is because Find My iPhone can only be used to add a passcode to devices that don’t already have one set. If you’ve created a passcode on your device, you (or malicous users with access to your account) cannot change it from Find My iPhone. It can only be changed or removed directly from the device. Unfortunately, users affected by this attack will need to get in touch with Apple to work around the issue. It’s also highly advisable to reset your Apple ID password and security questions once you’ve regained access to the affected iCloud account. For those who haven’t been affected, here are a few steps you can take to ensure you aren’t hit by a similar attack: Use unique passwords. Using the same password on multiple services (iCloud, Gmail, Facebook, etc) put all of your accounts at risk. An attacker who gains your password for one service can then try it on the others. If you use the same password on some of them, they’ll have access to everything. One great way to ensure you’re using a unique password on each website is to use an app like iCloud Keychain (http://support.apple.com/kb/HT5813) or 1Password to manage them. Use two-factor authentication (http://support.apple.com/kb/HT5570?viewlocale=en_US&locale=en_US). Two-factor authentication boosts your online security by requiring you to enter a time-sensitive code after logging in and before accessing your account. Not all web services offer this extra layer of security, but many do, including Gmail, Facebook, Twitter, and yes, even your Apple ID (http://support.apple.com/kb/HT5570?viewlocale=en_US&locale=en_US). You can use an app like iCloud Keychain (http://support.apple.com/kb/HT5813), Google Authenticator or Authy to manage these codes, or get them via SMS. Use a passcode or Touch ID on your iOS devices. If you’re not already using Touch ID or a passcode to secure your iOS devices, it’s a good idea to add one. That will prevent malicious users from remotely adding one to lock you out. As noted above, unprotected devices can be remotely locked, while devices secured with a passcode or Touch ID cannot. <http://9to5mac.com/2014/05/26/australian-mac-and-ios-users-find-devices-rem…>

2 1

INTEREST: Using Microsoft’s New Surface Pro 3 as a laptop—on my lap
by Wayne Billing 20 May '14

20 May '14

Microsoft presented the Surface Pro 3 today to the press. ...from: http://arstechnica.com/gadgets/2014/05/hands-on-using-microsofts-surface-pr… Hands-on: Using Microsoft’s Surface Pro 3 as a laptop—on my lap We give the device the couch treatment to see if it's up to the task. by Andrew Cunningham<http://arstechnica.com/author/andrew_cunningham/> - May 20 2014, 12:53pm CDT [cid:97A74A17-F83A-493F-BE9A-5FA9B663FCEB]<http://cdn.arstechnica.net/wp-content/uploads/2014/05/surface-pro-3-4.jpg> Enlarge<http://cdn.arstechnica.net/wp-content/uploads/2014/05/surface-pro-3-4.jpg> / Microsoft thinks this tablet can replace a laptop. We'll take that bet! Casey Johnston I've never actually considered buying one of Microsoft's Surface tablets. It's not because they're bad machines or because of some specific distaste for Windows or something—it's just that I spend most of my time on my computers writing, and when I'm writing on a laptop, I'm almost always using the device on my lap. The Surface Touch and Type covers have their virtues, but they absolutely need a stable desk or table to be used. When combined with the Surface tablet, the system is shaky on your lap at best. Microsoft made light of this foible at the Surface Pro 3 announcement today<http://arstechnica.com/gadgets/2014/05/surface-pro-3-sports-12-inch-screen-…>, taking care to highlight how many of the assembled press and analysts were using MacBook Airs to do their liveblogs and take their notes. I was one of those people, so a substantial portion of the announcement was aimed specifically at me (and my kind). Here's a Surface tablet you can use on your lap, as you would a laptop. Challenge accepted, Microsoft! When Panos Panay and the other Microsoft execs left the stage, I stowed my MacBook Air in my bag, grabbed my Surface review unit from the cart, and found a couch. This entire hands-on post was written with the Surface Pro 3 in my lap, and I kind of liked it. Going lap-on [cid:A594B609-3489-4A1F-B8A7-A9A9391EFFCB] Hands-on with the Surface Pro 3, by Casey Johnston. The Type Cover now has a magnetic strip running across the top that you fold flat to the front of the tablet. Before you fold it, the Type Cover is usable but uncomfortable and wobbly. After folding it, it's still not as rock-solid as a non-removable aluminum base, but it's a much more laptop-like typing experience. The keyboard is more stable, but the new kickstand comes into play here, too. The original Surface Pro supported one kickstand angle (22 degrees) while the Surface Pro 2 supported two (24 and 40 degrees). The Surface Pro 3 is more like a laptop in that its kickstand is pretty stable at any angle, so when you have the thing on your lap, you can point the screen at your face basically however you want. Looking at it from the front, it's easy to forget that you're not using a laptop. [cid:7EDEBFF2-A998-49A7-9A20-068B78DD2C03]<http://cdn.arstechnica.net/wp-content/uploads/2014/05/surface-pro-3-3.jpg> Enlarge<http://cdn.arstechnica.net/wp-content/uploads/2014/05/surface-pro-3-3.jpg> / The tablet's new kickstand. It's not quite the same as using a laptop, though. For one thing, the unfolded kickstand and the keyboard cover combined expand to take up a wide swath of one's lap—the whole apparatus extends nearly to my knees, and I'm not a short person. Those with less expansive laps may need to do a little maneuvering to fit the whole thing. You're also going to have to keep your lap mostly level. If one of your legs is raised higher than the other, the kickstand and keyboard become more wobbly again. The worst part, at least relative to the MacBook Air and the best Ultrabooks, is the Type Cover itself. It's a relatively shallow chiclet keyboard with mostly full-size keys, though the up and down arrow keys and some on the left and right of the keyboard are a little squeezed to conserve space. The backlight is nice, and I was quickly typing at my usual speeds, but the key travel is too shallow to be as satisfying or responsive as a normal keyboard. It's merely good, not great. For what it's worth, the trackpad in the Type Cover actually seems reasonably good. Usually when I review a Windows laptop, the first thing I do is update the trackpad driver and tweak the sensitivity settings until they feel reasonable, but I didn't have any problems with palm rejection or accuracy while I was typing this article. My only complaint is that it's a little small—on older laptops with smaller trackpads, I've seen some users have trouble because it's too easy to accidentally invoke the Windows 8 trackpad gestures, but that's not an issue I ran into. If one of your key complaints about previous Surfaces was that they were insufficient laptop replacements, the Surface Pro 3 hits much nearer the mark. The rest of the system [cid:B30DE39A-6BAD-422F-9544-82D49B72647E]<http://cdn.arstechnica.net/wp-content/uploads/2014/05/surface-pro-3.jpg> Enlarge<http://cdn.arstechnica.net/wp-content/uploads/2014/05/surface-pro-3.jpg> / The Surface Pro 3 and its Type Cover. Casey Johnston We'll be able to go a little more in-depth with the system (including the pen input) when we publish our full review, but for now we'll run through some of the important specs so you know more about what you're getting if you preorder one of these today. Let's start with the specs. Though we speculated that Microsoft would have to use one of the ultra-low-voltage Y-series Haswell CPUs to make the system thin and light enough, our review loaner has the same Core i5-4300U used in the revised last-generation Surface Pro<http://arstechnica.com/gadgets/2014/01/microsoft-quietly-bumps-surface-pro-…> (Core i3 and Core i7 options will also be available). Performance isn't going to go up much, and the Intel HD 4400 integrated GPU means this thing won't be much of a gamer, but we're impressed that Microsoft was able to make the tablet thinner and lighter without sacrificing speed, The tablet also has an 802.11ac adapter from Marvell, an upgrade from the 802.11n adapter in the Surface Pro 2. Our review loaner includes 8GB of DDR3 RAM and a 256GB solid-state drive from Samsung on a SATA III interface. With its i5 processor, this configuration<http://arstechnica.com/gadgets/2014/05/surface-pro-3-sports-12-inch-screen-…> costs $1,299. The body of the tablet is lighter than the Surface Pro 2 (800g versus 903g), though it remains considerably heavier than something like Apple's iPad Air<http://arstechnica.com/apple/2013/11/review-apples-ipad-air-is-a-big-tablet…> (469g) or even the older fourth-generation Retina iPads (652g). It's not going to break your arms, but it's definitely more similar to a laptop in its weight than most other tablets. [cid:9AAA1186-B854-4026-9D7B-1B07E905683C]<http://cdn.arstechnica.net/wp-content/uploads/2014/05/surface-pro-3-gallery…> Enlarge<http://cdn.arstechnica.net/wp-content/uploads/2014/05/surface-pro-3-gallery…> / Typing on the Surface Pro 3. Casey Johnston The 12-inch, 2160×1440 display compensates for the added weight. It's a reasonably bright, sharp 216 PPI display, which puts it within striking distance of the 15- and 13-inch Retina MacBook Pros<http://arstechnica.com/apple/2013/10/retina-round-two-apples-15-inch-2013-r…>(220 and 227 PPI, respectively). Its 3:2 aspect ratio will please those who prefer taller monitors to wider ones, though using the tablet in portrait mode isn't really any more comfortable than with any other large widescreen tablet—it's just a little too large to be as comfortable as the paper notepad that Panay compared it to. We've seen in other high-PPI Windows laptop reviews<http://arstechnica.com/gadgets/2014/03/lenovo-yoga-2-pro-review-you-say-you…> that this relatively high pixel density can cause problems with applications on the Windows desktop, though the Surface 3 Pro seems to strike a decent balance. By default, it's set to display onscreen elements at 150 percent their normal size, which shouldn't cause quite as many obvious UI problems as higher scaling settings. While using Chrome, an app that doesn't support Windows' high-PPI scaling modes properly, text and images was noticeably blurrier compared to Internet Explorer, but not so blurry that it was unusable or even immediately noticeable if you didn't know what you were looking for. [cid:3416217E-70D2-457E-8C26-FEC7735F183E]<http://cdn.arstechnica.net/wp-content/uploads/2014/05/surface-pro-3-2.jpg> Enlarge<http://cdn.arstechnica.net/wp-content/uploads/2014/05/surface-pro-3-2.jpg> / We'll test more about the system (including the pen input) in our full review. Casey Johnston Finally, the build quality is as good as we've come to expect from the Surface lineup. The magnesium chassis is nice-looking and solid-feeling, and the hinge was perfectly stable as long as I kept my lap level. The system gets a little warm to the touch, and Microsoft's demo booth was too loud for me to put Microsoft's ultra-quiet fan assembly to the test, but the fan vent along the edges of the tablet is unobtrusive, and you can't feel any hot air coming out of it. We'll be giving the pen, the battery life, and the performance a more thorough look in our full review. Based on our hour of usage, though, we're comfortable saying that the Surface Pro 3 is at least a little bit closer to being a suitable laptop replacement than the older versions. It might not be exactly what you're looking for in a tablet, but if you were on the fence about the Surface Pro 2, this is probably the device you needed to knock you over.

1 0

FYI: iPhone 5 Sleep/Wake Button Replacement Program
by Wayne Billing 25 Apr '14

25 Apr '14

...from: https://ssl.apple.com/support/iphone5-sleepwakebutton/ iPhone 5 Sleep/Wake Button Replacement Program [cid:37743076-1E1C-4A47-AB95-1BE932D24092] Please select a Country Asia Australia België Belgique Brasil България Canada (English) Canada (Français) Česká republika 中国 Danmark Deutschland Eesti EMEA España Ελλάδα France Hong Kong (English) 香港 Hrvatska India Ireland Italia 日本 대한민국 Κύπρος Latin America América Latina Latvija Lietuva Luxembourg (English) Luxembourg (Français) Luxemburg (Deutsch) Macau (English) 澳門 Magyarország Malaysia Malta México Nederland New Zealand Norge Österreich Polska Portugal România Россия Singapore Slovensko Slovenija Schweiz Suisse Suomi Sverige 台灣 ไทย Türkiye UK United States Other countries Apple has determined that the sleep/wake button mechanism on a small percentage of iPhone 5 models may stop working or work intermittently. iPhone 5 models manufactured through March 2013 may be affected by this issue. Apple will replace the sleep/wake button mechanism, free of charge, on iPhone 5 models that exhibit this issue and have a qualifying serial number. The sleep/wake button is located on the top of your iPhone 5: [iPhone 5 sleep/wake button detail] Eligibility If your sleep/wake button isn’t working properly, please enter your iPhone 5 serial number below to see if it qualifies for this program. Please see the Replacement Process section for next steps. Finding your iPhone serial number is easy. See how.<http://support.apple.com/kb/HT4061> Note: If your iPhone 5 sleep/wake button does not show any signs of this issue and/or does not have a qualifying serial number, no action is required on your part at this time. Replacement Process As of April 25, 2014, the replacement process will be available in the U.S. and Canada. In other countries, it will be available as of May 2, 2014. Replacement of the sleep/wake button mechanism is done at an Apple Repair Center. There are two ways to send your iPhone to the repair center—carry-in or mail-in. See below for details. The replacement process takes approximately 4-6 days from the time your iPhone is received at the repair center until it is returned to you. Your iPhone will be examined prior to any service to verify that it is eligible for this program and is otherwise in working order. Before sending your iPhone to Apple for service, you will need to back up all your data and erase all your content and settings. Note: If your iPhone 5 has any damage such as a cracked screen which impairs the replacement of the sleep/wake button, that issue will need to be resolved prior to the sleep/wake button replacement. In some cases, there may be a cost associated with the repair. How to send your iPhone 5 to an Apple Repair Center * Carry-in * Bring your iPhone 5 to a participating provider<https://ssl.apple.com/support/iphone5-sleepwakebutton/locate/> - Apple Retail Store or Apple Authorized Service Provider. * Your iPhone will be examined to verify eligibility, and then sent to the local Apple Repair Center. * You will be notified when your iPhone is ready for pickup. If you require a loaner during the time that your iPhone is being serviced, participating Apple Retail Stores and Apple Authorized Service Providers will have iPhone 5 models (16GB only) available. Note: To use the carry-in option, you must visit an Apple Retail Store or participating Apple Authorized Service Provider and not a wireless carrier partner. * Mail-in * Call Apple<https://ssl.apple.com/support/iphone5-sleepwakebutton/> and request a postage paid box to send your iPhone in to the local Apple Repair Center. * Your iPhone will be examined by the Repair Center to verify eligibility. * After it has been serviced, your iPhone will be returned to you by mail. Preparing your iPhone 5 for service Make sure your iPhone is ready for service by completing the following steps: * Back up your data<http://support.apple.com/kb/HT5262> to iTunes or iCloud * Turn off Find my iPhone<http://support.apple.com/kb/PH2702> * Erase data and settings in Settings > General > Reset > Erase all Content and Settings * Remove any case or cover Note: If you are running iOS 6, your iPhone will need to be upgraded to iOS 7 after the sleep/wake button mechanism is replaced. Additional Information Apple may restrict or limit repair to the original country of purchase. Your iPhone 5 must be in working order to qualify for this program. If you believe you have paid for a replacement due to this issue, contact Apple<https://ssl.apple.com/support/iphone5-sleepwakebutton/> regarding a refund. This worldwide Apple program does not extend the standard warranty coverage of the iPhone. The program covers iPhone 5 models for 2 years after the first retail sale of the unit.

1 0

FYI: iPhones and Macs get fix for extremely critical bug
by Wayne Billing 22 Apr '14

22 Apr '14

...from: http://arstechnica.com/security/2014/04/iphones-and-macs-get-fix-for-extrem… <http://arstechnica.com/security/> iPhones and Macs get fix for extremely critical “triple handshake” crypto bug Flaw makes it possible for attackers to bypass some HTTPS protections. by Dan Goodin<http://arstechnica.com/author/dan-goodin/> - Apr 22 2014, 4:46pm CDT Apple has patched versions of its iOS and OS X operating systems to fix yet another extremely critical cryptography vulnerability that leaves some users open to surreptitious eavesdropping. Readers are urged to install the updates immediately. The flaw resides in the secure transport mechanism of iOS version 7.1 and earlier for iPhones and iPads and the Mountain Lion 10.8.5 and Mavericks 10.9.2 versions of Mac OS X, according to advisories here<http://seclists.org/bugtraq/2014/Apr/135> and here<http://seclists.org/bugtraq/2014/Apr/133>. The bug makes it possible to bypass HTTPS encryption protections that are designed to prevent eavesdropping and data tampering by attackers with the capability to monitor traffic sent by and received from vulnerable devices. Such "man-in-the-middle" attackers could exploit the bug by abusing the "triple handshake" carried out when secure connections are established by applications that use client certificates to authenticate end users. "In a 'triple handshake' attack, it was possible for an attacker to establish two connections which had the same encryption keys and handshake, insert the attacker's data in one connection, and renegotiate so that the connections may be forwarded to each other," Apple's warning explained. "To prevent attacks based on this scenario, Secure Transport was changed so that, by default, a renegotiation must present the same server certificate as was presented in the original connection." The patch comes three months after the disclosure of a separate serious HTTPS vulnerability dubbed "goto fail"<http://arstechnica.com/security/2014/02/extremely-critical-crypto-flaw-in-i…> that similarly threatened iOS and OS X Mavericks users. It wasn't fixed in OS X<http://arstechnica.com/apple/2014/02/apple-releases-os-x-10-9-2-patches-ssl…> until four days after the bug became widely known, a delay that prompted criticism from security professionals<http://arstechnica.com/security/2014/02/four-days-in-and-still-no-patch-for…> because it potentially gave attackers a window to exploit Mavericks machines. By contrast, the triple handshake bug may be considered less severe because it affects a smaller class of applications. Still, it's a serious bug because those apps are typically used by businesses and government agencies, where security is especially sensitive. More information about triple-handshake weaknesses is available here<https://secure-resumption.com/>. More recently, the Internet was severely threatened by another extremely critical vulnerability in HTTPS software—the so-called Heartbleed bug in the widely used OpenSSL cryptographic library<http://arstechnica.com/security/2014/04/critical-crypto-bug-in-openssl-open…>. Apple has reportedly updated its Airport Base Stations<http://www.macworld.com/article/2146391/apple-releases-heartbleed-fix-for-a…> to fix that critical flaw as well, according to Macworld. The iOS and OS X updates Apple issued Tuesday, which Ars wrote about earlier here<http://arstechnica.com/apple/2014/04/apple-releases-ios-7-1-1-with-further-…>, fix a variety of other serious security vulnerabilities, some of which also affect Mac OS X Lion. Users should install them as soon as possible.

1 0