June 2008 - apple-list - University of Manitoba Mailing Lists

FYI: Problems opening older WORD documents in Microsoft WORD 2008(12)?
by billing 30 Jun '08

30 Jun '08

...from: http://www.macworld.com/article/134138/2008/06/officeupdates.html?lsrc=mwwe… Opening Old Word Files By Christopher Breen mailto:mac911@macworld.com Mac 911 Tip of the Week Reader Jim Harper feels like Word 2008 has severed his ties with the past. He writes: "I'm running Tiger and when I upgraded to Microsoft Office 2008 from Office 2004 I cannot open Word files created with my 90s Microsoft Word versions. Any solution available?" Yes. Start by updating your copy of Office to the very recently released Microsoft Office for Mac 12.1.1 Update. This update is supposed to address an issue where older Word files won't open when you double-click them. http://www.macworld.com/article/134138/2008/06/officeupdates.html?lsrc=mwwe… I use the phrase "supposed to" in this context because it may not work. Microsoft has issued contradictory information on this subject. In a support note, Microsoft states that the 12.1.1 Update "fixes an issue that prevents Microsoft Word 2008 for Mac Service Pack 1 (SP1) from opening Word documents when you double-click the document or when you download the document from a Web site." Yet, Knowledge Base document 953266 states that "The Office 2008 for Mac 12.1.1 Update blocks users from opening older Word for Mac documents by using the methods that are mentioned in the 'Symptoms' section." And those symptoms include double-clicking on a document, dragging a document to the Word 2008 for Mac program icon, dragging a document to the Word 2008 for Mac program icon that is in the Dock, and executing an AppleScript that uses the Finder to open a Microsoft Word document. And the reason? Apparently these older documents may pose a security threat and opening them in such ways puts you at risk. Of course Microsoft is happy to let you open them by choosing Open from the File menu, which is somehow more secure because... uh, it's more inconvenient?

1 0

FYI: two OSX trojan horse programs encountered
by billing 24 Jun '08

24 Jun '08

...from: http://www.intego.com/news/ism0803.asp INTEGO SECURITY MEMO - June 20, 2008 OSX.Trojan.PokerStealer Trojan Horse Attempts to Take Control of Macs Exploit: OSX.Trojan.PokerStealer Discovered: June 20, 2008 Risk: Low Description: A Trojan horse has been found in the wild masquerading as program for Mac OS X called “PokerGame”. The Trojan in question is a shell script encapsulated in an application, and is distributed in a 65 KB Zip archive; unzipped, it is 180 KB. The Trojan horse, when run, activates ssh on the Mac on which it is running, then sends the user name and password hash, along with the IP address of the Mac, to a server. It asks for an administrator’s password after displaying a dialog saying, “A corrupt preference file has been detected and must be repaired.” Entering the administrator’s password enables the program to accomplish its tasks. After gaining ssh access to a Mac, malicious users can attempt to take control of them, delete files, damage the operating system, or much more. Intego VirusBarrier X4 and X5 with virus definitions dated June 20, 2008 protect against this Trojan horse. Intego recommends that users never download and install software from untrusted sources or questionable web sites. = - = - = - = - = - = - = INTEGO SECURITY ALERT - June 19, 2008 Apple Remote Desktop Vulnerability Allows Malicious Programs to Execute Code as Root Exploit: ARDAgent root privilege escalation Discovered: June 19, 2008 Risk: Critical Description: A vulnerability has been discovered that allows malicious programs to execute code as root when run locally, or via a remote connection, on computers running Mac OS X 10.4 and 10.5. This vulnerability takes advantage of the fact that ARDAgent, a part of the Remote Management component of Mac OS X 10.4 and 10.5, has a setuid bit set. Any user running such an executable gains the privileges of the user who owns that executable. In this case, ARDAgent is owned by root, so running code via the ARDAgent executable runs this code as root, without requiring a password. The exploit in question depends on ARDAgent’s ability to run AppleScripts, which may, in turn, include shell script commands. When an application enables a root privilege escalation of this type, any malicious code that is run may have devastating effects. These may range from deleting all the files on the Mac (regardless of who owns them) to more pernicious attacks such as changing system settings, and even setting up periodic tasks to perform them repeatedly. Any application could use this vulnerability to obtain root privileges without users ever needing to enter passwords. Users could run malicious programs that they download from the Internet or receive from friends or colleagues, and, if the program exploits this vulnerability, simply launching it once would be sufficient for damage to be done. There are cases where this exploit does not work. If a user has turned on Remote Management in the Sharing pane of System Preferences under Mac OS X 10.5, or if a user has installed Apple Remote Desktop client under Mac OS X 10.4 or earlier and has activated this setting in the Sharing preferences, the exploit will not function. Most users, however, will not have this service turned on; generally only those users who want to observe or control other computers on their network will turn this on to do so. Note that Mac OS X 10.5’s Screen Sharing function has no effect on this vulnerability. This exploit can be triggered by any type of user account: standard user, administrator, or even a guest account. Therefore, a guest logged in using Mac OS X 10.5’s Guest Account feature has the ability to download an application and unwittingly run malicious code with no security warning.

1 0

INTEREST: iTunes Store - biggest music retailer in USA; world's biggest online movie store
by billing 24 Jun '08

24 Jun '08

....from: http://www.macworld.com/article/134054/2008/06/itunesstore.html?lsrc=mwweek iTunes Store - five billion sold and counting by Peter Cohen, Macworld.com Jun 19, 2008 8:35 am Apple on Thursday announced that more than five billion songs have been purchased and downloaded from its iTunes Store. According to NPD MusicWatch figures, the iTunes Store is the number one music retailer in the U.S.; Apple also says that the iTunes Store is the most popular online movie store in the world, with people renting and buying more than 50,000 movies every day. The U.S. iTunes Store’s music catalog stretches to over eight million songs, more than 20,000 TV episodes and more than 2,000 films, including more than 350 movies in high-definition video.

1 0

INTEREST: A.M.D. and Its War With Intel: predatory pricing?
by billing 21 Jun '08

21 Jun '08

...from: http://www.nytimes.com/2008/06/21/business/21nocera.html?_r=1&th=&adxnnl=1&… A.M.D. and Its War With Intel By JOE NOCERA Published: June 21, 2008 A few weeks ago, Stephen Labaton of The New York Times broke the news that the Federal Trade Commission had decided to open a formal antitrust investigation into Intel, the world’s dominant maker of microprocessors. Subpoenas had gone out not just to Intel, but to many of the computer manufacturers who rely on Intel chips. The investigation, as Mr. Labaton wrote, was going to revolve around “accusations that Intel’s pricing is intended to maintain a near monopoly on the microprocessor market.” The chief accuser, of course, was Intel’s main (some would say only) rival, Advanced Micro Devices. I say “of course” because I can scarcely remember a time when A.M.D. hasn’t been complaining about Intel’s supposed predatory behavior. But I can also recall the company’s many missteps and execution failures over the years, which have tended to undercut its claims. It was always a little hard to swallow A.M.D.’s argument that it was being hurt by Intel’s anticompetitive practices when it had such a long history of snatching defeat from the jaws of victory. In recent years, however, two things have happened. First, in 2003, A.M.D. came out with a chip called Opteron, which was far superior to anything Intel had on the market. Indeed, this was one of the few times that Intel was the company stubbing its toe; it took a year before it had a competitive chip. What’s more, the Opteron was aimed at the highly profitable server market, which has long been Intel’s domain. It is fair to say that Intel was none too happy with this state of affairs, and it wasn’t too long before A.M.D. was complaining that Intel was cutting deals to keep computer makers from straying, even though many of them wanted to use the Opteron. Which perhaps explains the second thing that happened: A.M.D.’s accusations finally began to gain some traction. In 2005, after a lengthy investigation, Japan’s Fair Trade Commission asserted that Intel had violated the country’s antitrust laws by, in effect, paying Japanese computer manufacturers to limit their business with A.M.D. That same year, A.M.D. sued Intel in federal court, charging predatory pricing; the case is scheduled to be tried in February 2010. Meanwhile, the European Commission began looking into Intel’s pricing practices; it has since made several preliminary rulings that don’t bode well for the chip giant. And in South Korea this month, Intel was fined $25.4 million for giving rebates to two South Korean computer manufacturers, which had the effect of “excluding” A.M.D., according to the Korea Fair Trade Commission. Intel has said it will appeal. (The New York attorney general, Andrew Cuomo, has also started an investigation, but he’s just piling on.) With all this ferment, it was probably inevitable that the F.T.C. would follow suit. If the rest of the world is busy imposing sanctions on Intel for abusing its monopoly power, it hardly looks good for the nation’s chief antitrust enforcer to be sitting on its hands. When I made some inquiries this week, the strong sense I got was that the commissioners wanted to get to the bottom of the Intel accusations once and for all, and needed subpoena power to gather all the evidence they needed. But in antitrust, the notion of “getting to the bottom of it” is notoriously squishy, and this case is squishier than most. There is no question that Intel offers large discounts to its big customers, along with rebates, quarterly marketing dollars and other goodies. Because those discounts are directly related to how much business a manufacturer gives to Intel, it necessarily has the effect of excluding A.M.D.—since it’s the only other company competing for the business. Is that predatory behavior? Or is that good old-fashioned competition? What makes antitrust so maddening is that the answer depends as much on who is asking the question — and where — as it does on the evidence. • Let’s start with a simple question: Are discounts good or bad? When I put it like that, the answer is obvious: discounts are clearly good. They allow consumers to buy things at lower prices. Indeed, price competition is at the very heart of free-market capitalism, and it is the natural result of competition. It’s what we as a society want companies to do. For as long as we’ve had antitrust laws in the United States, predatory pricing — pricing intended solely to prevent a rival from being able to compete — has been against the law. After all, if a big company drops its prices on a short-term basis to drive a smaller rival out of business — and then can raise prices with impunity because it has eradicated its competitor — consumers are ultimately harmed by the price cuts. But our definition of predatory pricing has tended to vary over time. In the 1950s and 1960s, United States antitrust enforcers — and the courts — tended to view many forms of discounting as predatory. One sorry result was that actions that actually helped consumers were considered illegal practices. But in the 1970s, that all changed, as legal scholars argued persuasively that anticompetitive behavior had to be defined in more rigorously economic terms, and that there needed to be a high standard of proof that monopolistic behavior was harming consumers. This became known as the Chicago School of antitrust theory, and in time, the courts embraced many of its theories. One consequence is that today, it is almost impossible to bring a discounting case, even if it has exclusionary consequences. It is presumed by the courts that discounting benefits consumers. The only form of discounting that is now viewed by the courts as proof of predatory behavior is pricing below cost. When I spoke to Robert E. Cooper, a lawyer at Gibson, Dunn & Crutcher, who is representing Intel, he cited a series of Supreme Court cases, going back 20 years, that has come down in favor of discounting — even enormous discounts based on market share, which have the effect of excluding rivals. Intel insists that it doesn’t price below cost, and given the nature of these things — selling in huge volume brings Intel’s own costs down, thanks to economies of scale — it will be almost impossible to prove otherwise. Does this mean that Intel is all warm and fuzzy when it is negotiating with the big computer manufacturers? Not remotely. Roger Kay, the president of Endpoint Technology Associates, and a very close observer of the Intel-A.M.D. wars, laid out a scenario to me that he thought likely. A computer manufacturer sees its market share declining. When it comes time to negotiate a new microprocessor contract with Intel, it is told that its volume has diminished so much that it can not longer get the same big discounts it has come to depend on for its own profits. But, the Intel salesman adds, if the company is willing to shift more business to Intel, and increase the volume a little, it will still get the discount. Naturally, the company agrees. Indeed, Mr. Kay says he believes this is precisely what happened in Japan, where the two companies that abandoned A.M.D. completely were Toshiba and Sony — which were both losing market share to competitors. “Thus,” he wrote me in an e-mail message, “Intel can claim it is doing nothing wrong and A.M.D. can claim its options are being foreclosed, and in a sense, they’re both right.” One reason A.M.D. has had more success pressing its case abroad than in the United States is that in many places in the world, the reigning antitrust view is what’s called the post-Chicago School, which holds that there are times when pricing above cost can still constitute predatory behavior. Indeed, the European Commission tends to put far more emphasis on competition than on consumers, and views with suspicion companies with oversize market share, like Intel But what happens if the commission rules against Intel — as seems likely — but the F.T.C. and the United States courts rule in favor of the company? That’s what happens these days with mergers that need government approval — Europe has turned thumbs down on a number of mergers involving two American companies, and as a result they haven’t gone through. The world economy really won’t function very well if multinational companies have to dance between dueling regulators. Either we need to adopt their standards, or they need to adopt ours. The Intel-A.M.D. shows, if nothing else, how untenable the current state of play is in antitrust. Despite its recent investigation, the F.T.C. has long been reluctant to pursue a formal investigation against Intel; I hear that even now many of its economists simply do not believe that Intel’s policies amount to predatory pricing. But there is one other reason why A.M.D. faces an uphill struggle pressing its case in the United States. Its own market share numbers don’t seem to back up its contention that Intel is preventing it from competing. According to data provided to me by Ashok Kumar, a well-known technology analyst with CRT Capital Group, A.M.D.’s overall market share in microprocessors was 17 percent in March 2005. By December 2006, it had risen to 25 percent. Today it has sunk back to 20 percent. The rise in market share is directly attributable to A.M.D. having strong products like the Opteron. But then Intel came roaring back, leap-frogging A.M.D.’s technology. Meanwhile, the smaller company’s latest high-end chip, code-named Barcelona, has been delayed when a flaw was discovered in it. A.M.D. has lost money for six quarters in a row. Apparently, some things never change.

1 0