- apple-list - University of Manitoba Mailing Lists

FYI: US-CERT Vulnerability in Microsoft Image Processing Component
by billing 14 Sep '04

14 Sep '04

NOTE: the end of this message an additional list of environments/applications that could be affected by this vulnerability: --------------------------------------------------------------- From: alerts(a)us-cert.gov Subject: US-CERT Cyber Security Alert SA04-258A -- Vulnerability in Microsoft Image Processing Component Date: September 14, 2004 6:18:58 PM GMT-05:00 To: alerts(a)us-cert.gov -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cyber Security Alert SA04-258A Vulnerability in Microsoft Image Processing Component Original release date: September 14, 2004 Last revised: -- Source: US-CERT Systems Affected * Applications that process JPEG images on Microsoft Windows, including but not limited to * Internet Explorer * Microsoft Office * Microsoft Visual Studio * Picture It! * Applications from other vendors besides Microsoft Overview An attacker may be able to gain control of your computer by taking advantage of the way some programs process the JPEG image format. Solution Apply a patch Microsoft has issued updates to address the problem. Obtain the appropriate update from Windows Update and from Office Update. Note: You may need to install multiple patches depending what software you have on your computer. Use caution with email attachments Never open unexpected email attachments. Before opening an attachment, save it to a disk and scan it with anti-virus software. Make sure to turn off the option to automatically download attachments. View email messages in plain text Email programs like Outlook and Outlook Express interpret HTML code the same way that Internet Explorer does. Attackers may be able to take advantage of that by sending malicious HTML-formatted email messages. Maintain updated anti-virus software It is important that you use anti-virus software and keep it up to date. Most anti-virus software vendors frequently release updated information, tools, or virus databases to help detect and recover from virus infections. Many anti-virus packages support automatic updates of virus definitions. US-CERT recommends using these automatic updates when possible. Description Microsoft Windows Graphics Device Interface (GDI+) is used to display information on screens and printers, including JPEG image files. An attacker could execute arbitrary code on a vulnerable system if the user opens a malicious JPEG file via applications such as a web browser, email program, internet chat program, or via email attachment. Any application that uses GDI+ to process JPEG image files is vulnerable to this type of attack. This vulnerability also affects products from companies other than Microsoft. References * September 2004 Security Update for JPEG Processing (GDI+) - <http://www.microsoft.com/security/bulletins/200409_jpeg.mspx> * US-CERT Vulnerability Note VU#297462 - <http://www.kb.cert.org/vuls/id/297462> _________________________________________________________________ Author: Mindi McDowell. Feedback can be directed to US-CERT, at "US-CERT Security Alerts" at <mailto:cert@cert.org>. Please include the Subject line "SA04-258A Feedback VU#297462". _________________________________________________________________ Copyright 2004 Carnegie Mellon University. Terms of use: <http://www.us-cert.gov/legal.html> This document is available from <http://www.us-cert.gov/cas/alerts/SA04-258A.html> Revision History September 14, 2004: Initial release -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFBR3B1XlvNRxAkFWARAtRbAJ9FRO0XqiiEMNjjwGoTBpox2wJqWgCg1YzJ 8JEt8xDHp6Gm5LXjI8y0uOU= =ehyf -----END PGP SIGNATURE----- MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) - Affected Software: - Windows XP and Windows XP Service Pack 1 - Windows XP 64-Bit Edition Service Pack 1 - Windows XP 64-Bit Edition Version 2003 - Windows Server 2003 - Windows Server 2003 64-Bit Edition - Office 2003 - Office XP Service Pack 3 - Visio 2003 (All versions) - Visio 2002 Service Pack 2 (All versions) - Project 2003 (All versions) - Project 2002 Service Pack 1 (All versions) - Review bulletin MS04-O28 for information about these affected operating systems and applications: - Windows NT Workstation 4.0 Service Pack 6a - Windows NT Server 4.0 Service Pack 6a - Windows NT Server 4.0 Terminal Server Edition Service Pack 6 - Windows 2000 Service Pack 2 - Windows 2000 Service Pack 3 - Windows 2000 Service Pack 4 - The Microsoft .NET Framework, version 1.0 - The Microsoft .NET Framework, version 1.1 - Internet Explorer 6 Service Pack 1 - Picture It! 2002 (All versions) - Greetings 2002 - Picture It! version 7.0 (All versions) - Digital Image Pro version 7.0 - Picture It! version 9 (All versions) Including Picture It! Library) - Digital Image Pro version 9 - Digital Image Suite version 9 - Producer for Microsoft Office PowerPoint (All versions) - Visual Studio 2003 .NET - Visual Basic .NET Standard 2003 - Visual C# .NET Standard 2003 - Visual C++ .NET Standard 2003 - Visual J# .NET Standard 2003 - Visual Studio 2002 .NET - Visual Basic .NET Standard 2002 - Visual C# .NET Standard 2002 - Visual C++ .NET Standard 2002 - The Microsoft .NET Framework, version 1.0 SDK - Platform SDK Redistributable: GDI+ - Review the FAQ section of bulletin MS04-O28 for information about these operating systems: - Microsoft Windows 98 - Microsoft Windows 98 Second Edition (SE) - Microsoft Windows Millennium Edition (ME) - Impact: Remote Code Execution - Version Number: 1.0 Important Security Bulletins ============================ MS04-027 - Vulnerability in WordPerfect Converter Could Allow Code Execution (884933) - Affected Software: - Office 2003 - Office XP Service Pack 3 - Office 2000 Service Pack 3 - Works Suite (All versions) - Impact: Remote Code Execution - Version Number: 1.0

1 0

INTEREST: computational fluid dynamics software (GridGEN & FieldView) for OSX
by billing 07 Sep '04

07 Sep '04

...from: http://www.pointwise.com/ http://www.pointwise.com/pr/04-08.shtml http://www.ilight.com/ http://www.macworld.com/news/2004/09/07/cfd/index.php/?lsrc=mcrss-0904 new CFD tools coming to Mac OS X By Brad Cook bcook(a)maccentral.com Pointwise Inc. and Intelligent Light made a joint announcement on Tuesday that their computational fluid dynamics (CFD) tools Gridgen and Fieldview will soon become available for Mac OS X. The companies cited their NASA customers who have moved to the Mac as the impetus for porting the two applications. Pointwise's Gridgen software enables engineers and scientists to generate meshes used to create 3D models while Intelligent Light's Fieldview supplies the post-processing tools needed to interpret the results of tests applied to such models. Neither company offered precise availability dates for the applications, nor had either of them updated their Web sites with system requirements and other information for the Mac OS X versions of the software. Contact Pointwise and Intelligent Light for pricing information. Fieldview examples: http://www.ilight.com/animations/fish4_small.mpg (41k) - This movie shows periodic wake shedding in proximity of a swimming fish, and was visualized with FIELDVIEW. The work was created by Tim Warburton of Brown University http://www.ilight.com/animations/matsu.mpeg (847Kb) - This animation shows the cross flow from an impeller. - Data courtesy of Matsushita Electric Industrial Co., Ltd. ...more at: http://www.ilight.com/raps.htm

1 0

OS X (10.2.x and 10.3.x) Security Update 2004-09-07
by billing 07 Sep '04

07 Sep '04

...from: http://docs.info.apple.com/article.html?artnum=61798 Security Update 2004-09-07 This Security Update is available for the following system versions: - Mac OS X 10.3.4 - Mac OS X 10.3.5 - Mac OS X Server 10.3.4 - Mac OS X Server 10.3.5 - Mac OS X 10.2.8 - Mac OS X Server 10.2.8 Summary: Apple on Tuesday released Security Update 2004-09-07 delivering a number of security enhancements. The update, which is recommended for all users, updates the CoreFoundation; IPSec; Kerberos; libpcap; lukemftpd; NetworkConfig; OpenLDAP; OpenSSH; PPPDialer; rsync; Safari; and tcpdump. The update is available via the Software Update control panel. Details available at: http://docs.info.apple.com/article.html?artnum=61798

1 0

SAFETY RECALL NOTICE: Lexmark printers
by billing 07 Sep '04

07 Sep '04

...from: http://support.lexmark.com/cgi-perl/recall.cgi?ccs=37:1:0:0:0: 0&target=http://support.lexmark.com/cgi-perl/ recall.cgi&emeaframe=&emeaframe=&target=http://support.lexmark.com/cgi- perl/recall.cgi&target=http://support.lexmark.com/cgi-perl/ recall.cgi&&req=1:1:0:0:0:0 SAFETY RECALL NOTICE Lexmark is conducting a voluntary recall of the E230, E232, E232t, E330, E332, E332n, or E332tn models. This recall is being done in cooperation with consumer safety agencies around the world. Lexmark has not received any reports of incidents or injuries involving these printers. However, through internal reliability testing Lexmark identified a potential safety issue in one printer after the equivalent of several years of normal usage. In the unlikely event of a multiple component failure, the printer could present an electrical shock hazard if it is connected to an ungrounded power source. For safety reasons, we ask that you unplug your printer from its power source before checking to see if you have one of the printers subject to this recall. In case your printer is connected to an ungrounded power source, we ask that you not open the covers, not turn off the printer, not touch the back of the printer, and not touch anything else connected to the printer prior to unplugging it. If you purchased your printer prior to Aug. 20, 2004, your printer is subject to this recall. Please click the following link to initiate the replacement process: To replace your product click here If you purchased your printer after Aug. 20, 2004, you will need to click on the following link to determine if your printer is subject to this recall. Determine if your printer is part of the recall

1 0

SEMINARS: Tiger, iLife, and Motion
by billing 01 Sep '04

01 Sep '04

Apple is giving two free seminars in Winnipeg on Sept 17 which will cover the following: Tiger (shipping first half of 2005): http://www.apple.com/macosx/tiger/ iLife (iDVD, iMovie, iPhoto, GarageBand, iTunes): http://www.apple.com/ilife/ Motion demos: http://www.apple.com/motion/video/ http://www.apple.com/motion/quicktour/ ================================== Tiger, iLife '04 and Beyond --------------------------- Whether it be creating or listening to music, taking pictures, or making movies- you know that iLife '04 is the must-have tool to manage your Digital Lifestyle . Attend our free introductory seminar and learn how to better manage your digital life, and then completely extend-it like never before. iLife '04 includes major new versions of iTunes, iPhoto, iMovie, and iDVD and the newest addition, GarageBand, a revolutionary new music application for musicians and aspiring musicians alike. Plus enjoy demonstrations of amazing 3rd party tools that take iLife '04 to a whole new level! Tiger keeps up Apple’s blazing pace of innovation with more than 150 breakthrough new features. Learn about the new features in Mac OS X "Tiger," including Spotlight, a revolutionary new way to find files and information on your personal computer; Safari RSS, a new version of Apple’s innovative web browser that provides instant access to the most current RSS information on the web; Dashboard, a dazzling new way to get in and out of a collection of new all-purpose “widgets” quickly; and iChat AV multi-way video and audio conferencing, the industry’s first consumer solution with a stunning 3D interface. What you will Learn ------------------- - Why the Mac is the best computer for organizing and sharing digital photos - Discover the easy way to make movies with music, video and your digital photos - How-to create your own music with amazing built-in realistic software instruments - Learn about exciting add-ons to iLife '04 that will ignite your creativity - An overview of system requirements to get the most out of iLife '04 Featured Solutions --------------------- - iLife '04: iPhoto 4, iMovie 4, iTunes 4.2, iDVD 4, and GarageBand - Mac OS X "Tiger" - Mac OS X "Panther" - Macintosh family of personal computers - Spotlight - iChat A/V - Dashboard - Core Image - Core Video - Safari RSS Who Should Attend --------------------- - Anyone who wants to capture and share exciting moments and create lasting memories - Beginners as well as individuals who already have some basic familiarity with digital media - Aspiring musicians - Windows PC Users Agenda ------- 9:00 a.m. - 10:00 a.m. Tiger Overview, Apple Product Update 10:00 a.m. - 12:00 a.m. iLife '04 Dates and Locations* -------------------- Calgary, AB September 13 9:00 a.m. - 12:00 p.m. Kelowna, BC September 14 9:00 a.m. - 12:00 p.m. Edmonton, AB September 15 9:00 a.m. - 12:00 p.m. Winnipeg, MB September 17 9:00 a.m. - 12:00 p.m. Victoria, BC September 17 9:00 a.m. - 12:00 p.m. Vancouver, BC September 21 9:00 a.m. - 12:00 p.m. Register online at: http://www.seminars.apple.com/goToSeries.html?id=4922 *Dates, times, locations, speakers, and content may change without notice. Copyright © 2004 Apple Computer, Inc. All rights reserved. Discovering Motion and Tiger ---------------------------- Introducing Motion, the only motion graphics package with real-time previews, procedural behavior animation, Final Cut Pro HD and DVD Studio Pro 3 integration. Apple’s high-performance motion graphic design and production application lets you explore new creative territory using self-propelled behavior animation, character-by-character title animation and a powerful new interface. Motion integrates seamlessly with Final Cut Pro HD and DVD Studio Pro 3, making it quicker and easier than ever to create motion graphics for film, video and DVDs. Tiger keeps up Apple’s blazing pace of innovation with more than 150 breakthrough new features. Learn about the new features in Mac OS X "Tiger," including Spotlight, a revolutionary new way to find files and information on your personal computer; Safari RSS, a new version of Apple’s innovative web browser that provides instant access to the most current RSS information on the web; Dashboard, a dazzling new way to get in and out of a collection of new all-purpose “widgets” quickly; and iChat AV multi-way video and audio conferencing, the industry’s first consumer solution with a stunning 3D interface. What you will Learn ------------------- - How Motion will let virtually anyone create real time professional motion graphics design with tight integration with all of Apple's professional digital content creation applications. Learn about the exciting innovations in operating system technology with next major release of Mac OS X, "Tiger" Featured Solutions ------------------ - Motion - Final Cut Pro HD - DVD Studio Pro 3 - PowerMac G5 - Spotlight - iChat A/V - Dashboard - Core Image - Core Video - Safari RSS Who Should Attend ------------------ - Design and effects professionals and aspiring professionals in broadcast, video, film, and DVD authoring - Anyone interested in the latest developments from Apple. Agenda ------- 1:00 p.m. - 2:00 p.m. Tiger Overview, Apple Product Update 2:00 p.m. - 4:30 p.m. Motion, Production Suite Dates and Locations* --------------------- Calgary, AB September 13 1:00 p.m. - 4:30 p.m. Kelowna, BC September 14 1:00 p.m. - 4:30 p.m. Edmonton, AB September 15 1:00 p.m. - 4:30 p.m. Winnipeg, MB September 17 1:00 p.m. - 4:30 p.m. Victoria, BC September 17 1:00 p.m. - 4:30 p.m. Vancouver, BC September 21 1:00 p.m. - 4:30 p.m. Register online at: http://www.seminars.apple.com/goToSeries.html?id=4923 *Dates, times, locations, speakers, and content may change without notice. Copyright © 2004 Apple Computer, Inc. All rights reserved. ------------------------------------------------------------------------ --- This message is being sent to you as a result of your request to the Apple Seminars & Events email notification system. You are subscribed to the mailing list <CANADA-MB(a)list.seminars.apple.com>. To unsubscribe, visit http://seminars.apple.com/SendMeNews.html We're sorry that we're unable to reply to e-mail messages. ------------------------------------------------------------------------ --- To find out more about these and other Apple events, please visit: http://www.apple.com/seminars Apple Computer 1 Infinite Loop Cupertino, CA 95014

1 0

INTEREST: Longhorn perspectives: Microsoft - "major improvements"; Others - "Microsoft to Gut Longhorn"
by billing 30 Aug '04

30 Aug '04

...from: http://www.eweek.com/article2/0,1759,1640211,00.asp Microsoft to Gut Longhorn to Make 2006 Delivery Date By Mary Jo Foley, Microsoft Watch and Darryl K. Taft August 27, 2004 UPDATED: After the cuts, Longhorn won't look much like the early builds that Microsoft has been distributing, but it should run existing applications. Microsoft is cutting back its Longhorn client's planned feature set so as to be able to make its current delivery targets: Beta 1 by next year and final release some time in 2006. Microsoft officially confirmed what had been leaked by developer sources late on Friday: changes to its future roadmap for the desktop version of Longhorn. And while developers and customers who expected they'd be required to rewrite their applications to take advantage of Longhorn may be happy with Microsoft's roadmap changes, others who were banking on promised Longhorn features, such as the next-generation Windows File System, will be far less so. The Windows File System (WinFS)$B!=(Btechnology that was set to simplify information storage and retrieval$B!=(Bwon't make it into the final, shipping versions of Longhorn client, company officials said. WinFS also won't be part of Longhorn server, the server complement of Longhorn that is still due out in 2007, as Microsoft announced earlier this year. The end result? Longhorn is going to be a lot more of an evolutionary than a revolutionary Windows release. "Longhorn is going to stop being a whole new thing and more of an XP with a lot of good new stuff," said one developer close to Microsoft, who requested anonymity. [...] =========== ...from: http://www.microsoft.com/presspass/press/2004/Aug04/08 -27Target2006PR.asp Microsoft Announces 2006 Target Date for Broad Availability Of Windows "Longhorn" Client Operating System Windows WinFX Developer Technologies Will Be Made Available For Windows XP and Windows Server 2003 REDMOND, Wash. -- Aug. 27, 2004 -- Microsoft Corp. today announced it will target broad availability of the Windows(I.(B client operating system code-named "Longhorn" in 2006, and make key elements of the Windows WinFXTM developer platform in "Longhorn" available for Windows XP and Windows ServerTM 2003. "Longhorn" will deliver major improvements in user productivity, important new capabilities for software developers, and significant advancements in security, deployment and reliability. "Getting 'Longhorn' to customers in 2006 will provide important advances in performance, security and reliability, and will help accelerate the creation of exciting new applications by developers across the industry," said Bill Gates, chairman and chief software Microsoft will deliver a Windows storage subsystem, code-named "WinFS," after the "Longhorn" release. The new storage system provides advanced data organization and management capabilities and will be in beta testing when the "Longhorn" client becomes available. [...] ============ The Microsoft "LongHorn" page is at: http://msdn.microsoft.com/longhorn/

1 0

INTEREST: video demo of Apple's MOTION, DIY bank fraud "kits" on Internet, How 8 pixels cost Microsoft $$$, IBM: SCO violating Linux GPL
by billing 22 Aug '04

22 Aug '04

..from: http://www.apple.com/motion/video/ Demonstration of Apple's new MOTION software - Apple’s high-performance motion graphic design and production application (http://www.apple.com/motion) - done at the most recent National Association of Broadcaster's (NAB) exhibition. ======================================= So you want to be a cybercrook... By James Sherwood CNET News.com August 19, 2004, 3:24 PM PT Some Web sites are now offering surfers the chance to download free "phishing kits" (definition of Phising at http://inews.webopedia.com/TERM/p/phishing.html) containing all the graphics, Web code and text required to construct the kind of bogus Web sites used in Internet phishing scams. According to security firm Sophos, the kits allow users to design sites that have the same look and feel as legitimate online banking sites that can then be used to defraud unsuspecting users by getting them to reveal the details of their financial accounts. "By putting the necessary tools in the hands of amateurs, it's likely that the number of attacks will continue to rise," said Graham Cluley, senior technology consultant at Sophos. Sophos warned that many of the kits also contain spamming software that enables potential fraudsters to send out thousands of phishing e-mails with direct links to their do-it-yourself fraud sites. "The emergence of these 'build your own phish' kits means that anyone can now mimic bona fide banking Web sites and convince customers to disclose sensitive information such as passwords," Cluley said. Many online banking Web sites now carry messages urging users not to open any e-mail that they suspect may be fraudulent and to telephone their bank for further information if they do receive suspicious e-mail. Phishing has become such a problem that there are now several online antiphishing guides to educate users about the con artists' common tricks. ===================== ...complete article at: http://zdnet.com.com/2100-1104_2-5316664.html? part=rss&tag=feed&subj=zdnet How eight pixels cost Microsoft millions By Jo Best Silicon.com August 19, 2004, 11:36 AM PT Microsoft's lack of multicultural savvy cost the Redmond behemoth millions of dollars, according to a company executive. The software giant has seen its products banned in some of the biggest markets on earth--and it's all because of eight wrongly colored pixels, a dodgy choice of music and a bad English-to-Spanish dictionary. Speaking at the International Geographical Union congress in Glasgow on Wednesday, Microsoft's top man in its geopolitical strategy team, Tom Edwards, revealed how one of the biggest companies in the world managed to offend one of the biggest countries in the world with a software slip-up When coloring in 800,000 pixels on a map of India, Microsoft colored eight of them a different shade of green to represent the disputed Kashmiri territory. The difference in greens meant Kashmir was shown as non-Indian, and the product was promptly banned in India. Microsoft was left to recall all 200,000 copies of the offending Windows 95 operating system software to try and heal the diplomatic wounds. "It cost millions," Edwards said. Another social blunder from Microsoft saw chanting of the Koran used as a soundtrack for a computer game and led to great offence to the Saudi Arabia government. The company later issued a new version of the game without the chanting, while keeping the previous editions in circulation because U.S. staff thought the slip wouldn't be spotted, but the Saudi government banned the game and demanded an apology. Microsoft then withdrew the game. The software giant managed to further offend the Saudis by creating another game in which Muslim warriors turned churches into mosques. That game was also withdrawn. [...] ========================== ...complete article at: http://zdnet.com.com/2100-1104_2-5316507.html? part=rss&tag=feed&subj=zdnet IBM asks for Linux ban on SCO By David Becker CNET News.com August 19, 2004, 10:13 AM PT IBM asked a federal court to bar the SCO Group, a Linux adversary, from distributing any Linux software, in the latest filing in their ongoing legal battle. In a motion for partial summary judgment filed Wednesday in U.S. District Court in Salt Lake City, IBM asks the court to rule in favor of its counterclaim alleging SCO has violated the terms of one of the most common licenses under which Linux software is distributed. An IBM representative declined to comment beyond the text of the motion. An SCO representative said the company disputed IBM's allegations and would respond soon in court. The motion says that by distributing Linux software governed by the GNU General Public License (GPL) while at the same time declaring the GPL invalid, SCO has forfeited the right to distribute Linux code, particularly code to which IBM has made contributions. SCO has been a harsh critic of the GPL, declaring it a violation of the U.S. Constitution in one legal document. [...] ==================

1 0

IMPORTANT: 15" Powerbook G4 (aluminum) battery recall
by billing 20 Aug '04

20 Aug '04

...from: https://depot.info.apple.com/batteryexchange/index.html 15-inch PowerBook G4 Battery Exchange Program In cooperation with the U.S. Consumer Product Safety Commission (CPSC) and other international safety authorities, Apple is voluntarily recalling certain lithium ion rechargeable batteries that were sold worldwide from January 2004 through August 2004 for use with 15-inch PowerBook G4 (Aluminum) notebook computers. These batteries were manufactured by LG Chem, Ltd. of South Korea.

1 0

INTEREST: Judges rule file-sharing software legal
by wbilling 20 Aug '04

20 Aug '04

...complete article at: http://zdnet.com.com/2100-1104_2-5316570.html? part=rss&tag=feed&subj=zdnet By John Borland CNET News.com August 19, 2004, 1:27 PM PT A federal appeals court has upheld a controversial court decision that said file-sharing software programs such as Grokster or Morpheus are legal. Following the lead of a lower-court decision last year, the Ninth Circuit Court of Appeals in Los Angeles said on Thursday that peer-to-peer software developers were not liable for any copyright infringement committed by people using their products, as long as they had no direct ability to stop the acts. (Download the decision.) The ruling means that companies that write and distribute peer-to-peer software can't be shut down because of the actions of their customers. It did not say file-trading itself is legal, and lower courts in the United States have said individual computer users are breaking the law when they trade copyrighted files without permission. But the ruling does lift the cloud of potential liability from defendants Grokster and StreamCast Networks, as well as from many of their rivals. "The (record labels and movie studios) urge a re-examination of the law in the light of what they believe to be proper public policy," the court wrote. "Doubtless, taking that step would satisfy the copyright owners' immediate economic aims. However, it would also alter general copyright law in profound ways with unknown ultimate consequences outside the present context." [......] ============================

1 0

INTEREST: "If the human body did patch management the way (companies do), we'd all be dead."
by billing 17 Aug '04

17 Aug '04

...from: http://news.com.com/Study%3A+Unpatched+PCs+compromised+in+20+minutes/ 2100-7349_3-5313402.html?part=rss&tag=5313402&subj=news.7349.20 Study: Unpatched PCs compromised in 20 minutes Published: August 17, 2004, 12:22 PM PDT By Matt Loney and Robert Lemos Special to CNET News.com Don't connect that new PC to the Internet before taking security precautions, researchers at the Internet Storm Center warned Tuesday. According to the researchers, an unpatched Windows PC connected to the Internet will last for only about 20 minutes before it's compromised by malware, on average. That figure is down from around 40 minutes, the group's estimate in 2003. The Internet Storm Center, which is part of the SANS Institute, calculated the 20-minute "survival time" by listening on vacant Internet Protocol addresses and timing the frequency of reports received there. "If you are assuming that most of these reports are generated by worms that attempt to propagate, an unpatched system would be infected by such a probe," the center, which provides research and education on security issues, said in a statement. The drop from 40 minutes to 20 minutes is worrisome because it means the average "survival time" is not long enough for a user to download the very patches that would protect a PC from Internet threats. Scott Conti, network operations manager for the University of Massachusetts at Amherst, said he finds the center's data believeable. "It's a tough problem, and it's getting tougher," Conti said. One of Conti's administrators tested the center's data recently by placing two unpatched computers on the network. Both were compromised within 20 minutes, he said. The school is now checking the status of computers before letting them connect to the Internet. If a machine doesn't have the latest patches, it gets quarantined with limited network access until the PC is back up to date. "We are giving the people the ability to remediate before connecting to the network," Conti said. The center also said in its analysis that the time it takes for a computer to be compromised will vary widely from network to network. If the Internet service provider blocks the data channels commonly used by worms to spread, then a PC user will have more time to patch. "On the other hand, university networks and users of high-speed Internet services are frequently targeted with additional scans from malware like bots," the group stated. "If you are connected to such a network, your 'survival time' will be much smaller." In a guide to patching a new Windows system, the Internet Storm Center recommends that users turn off Windows file sharing and enable the Internet Connection Firewall. Microsoft's latest security update, Windows XP Service Pack 2, will set such a configuration, but users will have to go online to get the update, opening themselves up to attack. One problem, experts say, is network administrators' reliance on patching and their assumption that users will quickly patch systems. Speaking recently at the Microsoft TechEd developer conference in Amsterdam, Microsoft security consultant Fred Baumhardt said the day is likely to come when a virus or worm brings down everything. "Nobody will have time to detect it," he said. "Nobody will have time to issue patches or virus definitions and get them out there. This shows that patch management is not the be-all and end-all." Baumhardt stressed the importance of adaptability, using the human immune system as an example: "Imagine if your body said, 'Hmm, I have the flu. I've never had this before, so I'll die.' But that doesn't happen: Your body raises its temperature and so on, to buy time while other mechanisms kick in." "If the human body did patch management the way (companies do), we'd all be dead."

1 0

FYI: FireWire 800 23GB disc burner announced, iSync 1.5 adds more devices
by billing 11 Aug '04

11 Aug '04

The First FireWire 800/1394b DVD Optical Technology Disc-for-DATA Drives Records 23GB onto a Single Sided Disc. Based on blue laser technology, the AfterBurner stores up to 23 GB of native capacity per rewritable or write-one, read-many (WORM) single sided media, delivering an advanced optical storage and archiving solution for professional data-intensive applications. The high capacity and high performance FireWire 800 External AfterBurner Series drives are designed specifically for professional storage applications, graphic design, audio/video editing/authoring and medical imaging, e-mail archival, enterprise content management and multimedia projects. ...more information and at: http://www.nitroav.com/store/customer/home.php?cat=3 =============================== ...from: http://www.apple.com/isync/ iSync makes it even easier to make — and keep — your dates. That’s because iSync, Apple’s hot synchronizing software, now works with over thirty cell phone models, as well as multiple Macs, your iPod and your PDA. =============================

1 0

UPDATE: Final Cut, Cinema Tools, Compressor, LiveType, Soundtrack, DVD Studio
by billing 11 Aug '04

11 Aug '04

...from: http://www.apple.com/support/downloads/proapplicationsupport.html Pro Application Support 2.1 This update provides improvements for Apple's professional applications, and is strongly recommended for all users of Final Cut Pro, Cinema Tools, Compressor, LiveType, Soundtrack, and DVD Studio Pro. This update improves general user interface appearance and reliability and is required to receive future updates for these applications.

1 0

UPDATE: important Jaguar and Panther patches
by billing 11 Aug '04

11 Aug '04

NOTE: these updates may be easily be installed by choosing "About this Mac" from the Apple menu and clicking on the "Software Update..." button. Apple Mac OS X Bulletins (APPLE-SA-2004-08-09) Yesterday, two bulletins were released by Apple. The first bulletin involved the libpng (Portable Network Graphics) vulnerability that has been in numerous patches in the Unix and Linux world in the past 2 weeks. The Mac OS X CoreGraphics and AppKit frameworks have been updated to protect against the flaws in the reference library. The software update is available for these versions of OS X: * Mac OS X v10.3.4 "Panther" * Mac OS X Server v10.3.4 "Panther" * Mac OS X v10.2.8 "Jaguar" * Mac OS X Server v10.2.8 "Jaguar" The second bulletin announced the availability of Mac OS X v 10.3.5. The new version of OS X includes the patch for libpng, and also includes security updates for the Safari Web Browser and the TCP/IP stack (the rose fragmentation attack). For more information on either of these, please see the following URLs: http://docs.info.apple.com/article.html?artnum=61798 http://www.apple.com/support/downloads/

1 0

INTEREST: Logging On at 30,000 Feet,
by billing 09 Aug '04

09 Aug '04

...from: http://www.nytimes.com/2004/08/08/travel/08prac.html?th [NOTE: free registration required for article access] Logging On at 30,000 Feet By BOB TEDESCHI Published: August 8, 2004 IN late May, Ortwin Freyermuth readied himself for an 11-hour flight from Munich to his Los Angeles home - a journey typically preceded by a flurry of last-minute e-mail messages, in anticipation of a day's worth of traveling incommunicado. This time, though, Mr. Freyermuth eased onto his Lufthansa flight less harried than on previous trips. When his plane reached cruising altitude, he opened up his iBook, logged onto the Internet and answered messages from 30,000 feet. "It was amazing," said Mr. Freyermuth, a lawyer. "Now I don't have to stress out before every flight." The price of a stress-free flight - Lufthansa's Connexion by Boeing service costs $30 for a long-haul flight (six hours or more), or $10 for 30 minutes - is perhaps more than some are willing to pay. But Connexion is at the leading edge of a trend that analysts and executives said will gain momentum this year, and is likely to lead to lower prices, a greater selection of vendors and much more mouse clicking on flights. Connexion made its debut in May on Lufthansa, which calls its service FlyNet, and is the first full-feature, in-flight Internet service to reach travelers, after years of half-starts. The airline industry had originally planned to roll out airborne Web surfing in late 2001, but companies shelved those plans after Sept. 11 and the ensuing financial malaise. The service is only available to those with wireless Internet connections for their laptop or handheld computers. Increasingly wireless connections are built into portable devices, but those with older laptops can buy a wireless PC card for $50 to $100. What you get is a better experience than most Internet users receive at home. Wireless connection speeds are generally up to 20 times faster than those of dial-up service, and if just a few people are logged on in the plane, the speed can rival that of some workplace connections. And unlike many workplace Internet connections, Connexion's service offers unrestricted Web access. 5 Planes and Counting So far, five Lufthansa airplanes are equipped with the satellite receivers and wireless networks necessary to run the system, and the only routes served as of July were Munich-Los Angeles and Munich-Tokyo. But the company plans to equip all of its long-range aircraft with the technology, and add New York routes by the end of the year. According to Terrance Scott, a Connexion spokesman, Japan Airlines will be the next to add the service, sometime this summer or early fall, followed by Scandinavian Airlines and All Nippon Airways. Singapore Airlines, China Airlines and Korean Air will follow early next year. Mr. Scott said Connexion is in "active discussions" with several United States carriers, but none has signed on yet. [...] =======================

1 0

INTEREST: Apple laptop sales jump 17% in Higher Ed. in 2003
by billing 05 Aug '04

05 Aug '04

...from: http://www.businessweek.com/technology/content/aug2004/ tc2004085_0709_tc153.htm AUGUST 5, 2004 • Editions: N. America | Europe | Asia | Edition Preference SPECIAL REPORT: APPLE: THE NEXT GENERATION Apple Aces Academia Its college sales are surging as students flock to its well-designed laptops and the popular iPod/iTunes combo for digital music The University of California at Berkeley has some of the best and the brightest students in the Golden State's vaunted university system. When they want to arm themselves with the best tech tools, they head to the Scholar's Workstation. The on-campus computer store sells thousands of machines each year. Lately more of those models have come with an Apple (AAPL ) logo on the box. According to store administrator Mark Laws, the percentage of Apple computers sold has risen steadily. And in the fast-growing laptop category, Mac sales make up over half of the total at the Scholar's Workstation. That's a nice jump from less than 40% of total laptop sales at the store three school years ago. "People really seem to like them. We're definitely seeing more and more people come in to ask about them," says Laws. ONE-TWO LAPTOP PUNCH. Berkeley isn't the only campus where Macs are flying off the shelves. While the percentage of Macs sold at the Scholars Workstation is far higher than Apple's market share as tracked by PC market-research firms, CEO Steven P. Jobs and his troops have clearly been on a college roll. In each of the past three quarters, Apple has posted 40% increases in year-over-year sales for this segment. During the first half of its current fiscal year, Apple posted an 18% bump in year-over-year education sales. And most of that has come from higher education, since the K-12 market has remained almost flat for Apple (see BW Online, 8/3/04, "Apple's Back-to-School Blast"). Clearly the Mac is climbing the Ivory Tower. What's behind the college revival? Credit Apple's one-two laptop punch -- the lower-end iBook and the more powerful PowerBook, which are packing a wallop. "They have the right products at the right time," says Kenneth C. Green, director of the Campus Computing Project, an ongoing industry-funded study that examines how computing is used in higher education. (Apple helps to fund this study, along with rivals such as Dell (DELL ) and Hewlett-Packard (HPQ )). IT'S ALL PORTABLE. True, in higher education Apple has less ground to make up than in the broad PC market, where Jobs and his troops hold 3% or less of the total PC pie. That contrasts with Apple's 11.9% share in colleges in the first quarter of 2004. Moreover, that share could go up even more this year if Apple keeps up its torrid pace. Jobs & Co. sold 193,000 Macs into higher education in 2003, up 17.7% over the previous year. During that period, the entire higher-education market grew by only 11%. The biggest reason for Apple's expansion is the growing popularity of notebook computers on campus. According to collegiate market researcher StudentMonitor, 36% of all university students had laptops by the fall of 2003, up from 21% in 2000. During that same period, desktop ownership remained roughly flat in the high 60% range. No surprise, then, that notebook sales to universities soared by 33.8% from 2002 to 2003, according to IDC. Apple laptop sales rose by a whopping 58.5% in that same period. "When I go around and talk to colleges, I find out that well in excess of 90% of incoming freshmen have laptops," says Philip Schiller, Apple's senior vice-president of worldwide marketing. "They don't bring desktops anymore. It has all gone portable. So it makes sense we'd be doing better." LURE OF MUSIC. Surprisingly, this laptop explosion for Apple came without major product introductions. Schiller says the key is that Apple's core design expertise outshines raw speed comparisons with rival offerings. "You want a lot of features, but not a lot of doors and things that can break. And we're the only ones left that actually design our own products. Other companies don't have the talent or the tech to invest in breakthrough new designs and technologies such as widescreen [LCD laptop displays,]" says Schiller. Indeed, the pricey PowerBook has become the favorite portable workstation of the campus Unix clique, which wants a nifty graphical interface and the ability to crunch serious code. Add Apple's smooth WiFi access software and its laptops are doing well in a highly competitive market. "They're well positioned in the mobile space, which is where the market is growing," says IDC analyst David Daoud (see BW Online, 8/3/04, "Apple: Sweetness Regained"). Then there's the music factor. Apple's iTunes software, which comes as a free download for either PCs or Macs, has become the de facto standard for managing digital tunes on the desktop. That, plus the runaway success of Apple's iPod music player, could be fueling a slow but steady increase in Apple customers. "My sense is that music and the iPod are influencing purchasing decisions," says analyst Charles Wolf of Needham & Co. (He owns Apple shares and has a "buy" recommendation on the stock). YOUNG CONVERTS. Will Apple's newfound success in the halls of higher learning add much needed fresh blood to the adult Mac user base? That's the million-dollar question. To date, no one has tracked the percentage of college Macs buyers who remain loyal to Apple after they receive their sheepskin. In some respects, students may be more valuable customers because they're younger and have many more computer buying years in front of them. "It's hard to get people to move to a Mac, but once they do they tend to stay," says Wolf. If Apple can stay on a roll at college, then the Mac could well become a campus fixture once again. By Alex Salkever, Technology Editor for BusinessWeek Online

1 0

INTEREST: 2 High School laptop programs
by billing 05 Aug '04

05 Aug '04

Story last updated at 9:53 a.m. Thursday, August 5, 2004 Hays High students excited about hitting the iBooks this year HAYS (AP) -- When teachers at Hays High School tell their students to open their books this school year, there's a chance they won't be referring to a textbook. Students who showed up for enrollment this week at the western Kansas school -- about 1,000 of them in all -- walked away with a new Apple iBook laptop computer thanks to a school board initiative passed earlier this year. The laptops were issued during enrollment to give students time before classes begin to familiarize themselves with the computers, Principal Mike Hester said. Parents received a letter listing day and night time iBook training classes that run through Friday. The district made the decision to purchase laptops for the high school when the computer technology lease agreement for the district was up for renewal, Hester said. Money saved by using less paper also helped fund the new portable computers. [...] ...complete story at: http://www.dodgeglobe.com/stories/080504/sta_0805040028.shtml ======================================= HF-Lima rethinks use of middle-school laptops By Dolores Orman Staff Writer (August 5, 2004) — HONEOYE FALLS — The Honeoye Falls-Lima school board is trying to figure out what to do about the middle school laptop computer project that was launched in February with a focus on use at school and at home. That's because “there have been some people in the community who have been unhappy with the program,” Linda Hunt, school board president, said at the start of the board meeting Tuesday night. School district officials have acknowledged, among other things, that there should have been greater effort to inform the community about the program and that the development and implementation of the program was probably too fast. However, a school district committee charged with reviewing the middle school project, and various options, recommended Tuesday that the “most educationally sound” step for the 2004-05 school year is a “modified” one-to-one (one computer per student) plan. [...] The district is leasing for a four-year period 711 laptops from Apple Computer Inc. — 661 for students and 50 for teachers. Other options before the board: Offer the program to high school students instead; redistribute all laptops throughout the district; redistribute all laptops on carts in the middle and high schools; do a one-to-one pilot of smaller middle school groups and redistribute the rest of the laptops; reduce student computer use and return the laptops; and maintain a one-to-one for seventh and eighth grades and use laptops on a cart for sixth grade, freeing up computers for other schools. Hagerman suggested the last option as an alternative to the one the committee favors. ...complete story at: http://www.democratandchronicle.com/news/08056E551JI_news.shtml

1 0

FYI: XCode 1.5, LINUX iTunes, Mozilla "Bug Bounty Program", iTunes RSS feed
by billing 03 Aug '04

03 Aug '04

...from: http://www.appleinsider.com/article.php?id=579 Apple to release Xcode 1.5 this week By AppleInsider Staff Published: 10:00 AM EST Apple Computer yesterday announced to its Apple Developer Connection (ADC) members that it has completed the development of Xcode 1.5, the latest version of its integrated development environment for Mac OS X 10.3 Panther. According to a set of developer notes accompanying the release, Xcode 1.5 includes remote debugging, code completion for Java and AppleScript, subversion source-code control system support and native build system support for AppleScript. Additionally, sources said the release will pack an enhanced debugger with a memory browser, globals browser, and ability to display file static variables, faster editor performance, Ant templates , documentation bookmarks, and overall speed improvements. This latest build, 7K571, contains Xcode IDE 389, Xcode Core 387, and Tool Support 372. Earlier reports indicate that Xcode 1.5 will also include updates to the user interface, code sense, inspectors, building, source code management and file editing. In 2005, Apple will release Xcode 2.0 as part of its Mac OS X 10.4 Tiger distribution. This second major release of groundbreaking development tools is said to include a visual modeling interface, remote debugging, an integrated Apple Reference Library, 64-bit support, and improvements for Java developers. Apple has reportedly informed developers that an official release of Xcode 1.5 is expected on Thursday, at which time it will available to both paying and free ADC account holders. The software is currently being seeded as a full update, distributed in multiple image segments. =============================== ...from press release at: http://www.codeweavers.com/site/about/general/press/?id=20040803; cw=f16bec3c4f991bff9184ef9e0de0b8c3 CodeWeavers Adds Support For Apple iTunes In New CrossOver OfficeTM 3.1 Preview Most Requested CrossOver Office Enhancement Now Available for Limited Evaluation; Application Allows Dozens of Windows Programs to Run Natively in Linux MOSCONE CENTER, SAN FRANCISCO / BOOTH 1661 - (August 3, 2004) - CodeWeavers, Inc., the leading Windows-to-Linux software developer, today announced the release of an evaluation preview of CrossOver Office 3.1, the latest upgrade to the world's leading and most reliable Windows-to-Linux application solution. The pre-beta preview, announced at LinuxWorld 2004 Conference and Expo in San Francisco and available to existing CrossOver Office users only, includes new support for iTunes®, Apple's exciting digital jukebox and download store program. Since its initial release in 2002, CrossOver Office has significantly impacted the growth and practicality of the Linux operating system among desktop computer users. CrossOver Office enables many leading Windows applications including Microsoft Office, Internet Explorer, and Visio; Intuit Quicken; Macromedia Dreamweaver and Flash; and Apple QuickTime to operate natively under Linux with no secondary emulator needed. With iTunes support, CrossOver Office users will be able to download and organize songs from the iTunes Music Store. Soon they will also be able to plug their iPod into their Linux PC for music transfers and other jukebox-related tasks. [...] =========================== ...from: http://www.mozilla.org/press/mozilla-2004-08-02.html MOZILLA FOUNDATION ANNOUNCES SECURITY BUG BOUNTY PROGRAM Program harnesses power of the open source community to identify security vulnerabilities before they are exploited MOUNTAIN VIEW, Calif. - August 2, 2004 - The Mozilla Foundation today announced the Mozilla Security Bug Bounty Program, an initiative that rewards users who identify and report security vulnerabilities in the open source project's software. Under the new program, users reporting critical security bugs - as judged by the Mozilla Foundation staff - will collect a $500 cash prize. The new initiative was launched with funding from leading Linux software developer Linspire, Inc., and renowned Internet entrepreneur Mark Shuttleworth. [...] ========================== Apple has supplied an RSS feed for iTunes releases and most popular songs. It can be found at: http://phobos.apple.com/WebObjects/MZSearch.woa/wo/2.1 Go to the page, select the music genre of your choice, and the page will generate a URL suitable for inclusion in your RSS reader. Just copy and paste it as a new RSS feed site. (and for those of you who are not yet using RSS: - RDF Resource Description Framework. A language derived from XML which describes metadata. Commonly used as a backend format for articles and other publications. For more detailed information on RDF files, you might want to go directly to the official page on RDF files at the World Wide Web Consortium. RSS The RDF Site Summary is actually an extension to the RDF language. Quoting the official RSS v1.0 specification: ‘RDF Site Summary (RSS) is a lightweight multipurpose extensible metadata description and syndication format. RSS is an XML application, conforms to the W3C's RDF specification and is extensible via XML-namespace and/or RDF based modularization.’ ... or to put it another way: RSS allows its users to quickly and easily browse the latest news headlines from hundreds of different websites using a friendly and familiar interface. If you have the right RSS application it may have built-in support for synchronizing headlines and news stories with Palm OS PDAs and Apple iPods menaing that you can take your news with you. More info at: - http://www.xml.com/pub/a/2002/12/18/dive-into-xml.html - http://www.webreference.com/authoring/languages/xml/rss/intro/2.html ... which, simply, means that "news" source headlines (New York Times, Wall Street Journal, iTunes ::-) can all quickly be scanned with one simple application: an RSS Reader. Since you ask, there are various RSS Reader applications (and news feed sites) available. One simple, freeware RSS app (NewsMac for OSX 10.2 and above) can be found at: http://www.thinkmac.co.uk/newsmac/

1 0

FOLLOW UP: Duke to Give Apple iPods to First-Year Students for Educational Use
by billing 31 Jul '04

31 Jul '04

...from: http://www.dukenews.duke.edu/news/ipods_0704.html Monday, July 19, 2004 | DURHAM, N.C. -- Duke University will distribute Apple iPods to its incoming freshmen, as part of an initiative to encourage creative uses of technology in education and campus life. The pocket-sized digital devices, which can download and make use of both audio and text material, will be preloaded with Duke-related content, such as information for freshman orientation and the academic calendar. Through a special Duke Web site modeled on the Apple iTunes site, students also can download faculty-provided course content, including language lessons, music, recorded lectures and audio books. They also will be able to purchase music through the site. Duke officials said the iPod distribution is part of a pilot program between Duke and Apple Computer, Inc. that will be evaluated after a year. Duke is paying for the project with strategic planning funds that it has set aside for one-time innovative technology purposes. The total cost of the project is expected to reach $500,000 or more, which includes hiring an academic computing specialist for the project, grant funding for faculty, associated research costs and the purchase of the iPods. "This iPod pilot program is an exciting new component of Duke's strategic plan, which seeks to use information technology in innovative ways within the classroom and across the campus," said Provost Peter Lange, the university's senior academic officer. "We're approaching this as an experiment, one we hope will motivate our faculty and students to think creatively about using digital audio content and a mobile computing environment to advance educational goals in the same way that iPods and similar devices have had such a big impact on music distribution," said Tracy Futhey, vice president for information technology. "We think the power and flexibility of these devices offer some real advantages over other media used to distribute educational content such as CD-ROMs and DVDs." Futhey said she also expects students to develop their own content and interesting new uses for the devices. "I could easily imagine our student newspaper creating a weekly or daily audio editorial that students could listen to as they walk across campus," she said. Lynne O'Brien, director of Duke's Center for Instructional Technology (CIT), noted that over the last two years a growing number of faculty members have shown interest in adding audio and video components to their courses. "The iPod project will encourage faculty to experiment with adding elements such as music, foreign language and poetry to class curricula," she said. O'Brien cited as an example the elementary Spanish course taught by visiting assistant professor Lisa Merschel. Students in that course will use the iPods to listen to audio examples of textbook exercises, hear Spanish songs and record their own efforts to speak Spanish. In another course on environmental ethics, taught by adjunct professor Sally Schauman, students will use their iPods to record lectures and, while in the field, take notes and record interviews. O'Brien said she expects other Duke faculty members to suggest ideas over the coming academic year to supplement those already slated for inclusion in the pilot program. "We will be inviting faculty to submit project ideas early in the fall semester," she said. Lange said Duke will distribute the iPods to students Aug. 19, 2004, as part of freshman orientation. "We're limiting our distribution to this single class because it will make it easier for us to evaluate their experience relative to other students and determine whether the iPods promoted educational innovation as we hope. Duke students, like students at most universities, are already comfortable with the Internet and new technologies, and we think they'll rise to the challenge of working with their professors and others to develop new ways of learning. As with other technology innovations, we will evaluate this experiment carefully," Lange said. The 1,650 20-GB iPods distributed to Duke freshmen are the latest-generation ipods from Apple and are compatible with both Mac and Windows systems, as are an additional 150 iPods slated for other academic and support needs. The iPods given to the first-year students will become property of the recipients. Students who do not own their own computers will also be able to participate in the project through computing laboratories on campus. The university has developed a technical support plan for students that includes a one-year warranty on each iPod and assistance through the Duke Computer Store and the OIT help desk. Students who lose their iPods will be able to purchase a new one through the Duke Computer Store. Upperclassmen enrolled in classes utilizing iPods will be given loaners for the duration of the course. Duke's CIT, Office of Student Affairs, Office of the Provost, Office of the Executive Vice President and Office of Information Technology (OIT) are collaborating with Apple on the iPod project. For additional information, contact: David Menzies | phone: (919) 684-2151 | email: david.menzies(a)duke.edu

1 0

INTEREST: found at http://www.ipoding.com/: recharge iPod from Airport Express
by billing 29 Jul '04

29 Jul '04

Reader Chris W. writes: After seeing some people asking about it, I just randomly plugged my iPod Mini into the Airport Express to see what happens (the USB port of course). Surprisingly enough, the Express CHARGES the iPod. So to answer that question, you CAN charge your iPod using the Airport Express (which negates my need to tote the power charger for it now when I go traveling.) Now if Apple could only have a way to pass through the Audio to the Express from the iPod when it's plugged in, that would be a killer little firmware update.... Indeed, you can charge iPod mini and the new Click Wheel iPods from the USB port on AirPort Express (AX.) However, these iPods, at least with current firmware versions, will go into Disk Mode when connected to a data capable port (USB or FireWire) and cannot be forced back into Audio Mode, so you can't listen to your music while charging (as you could with the AC adapter.) There is still much we don't know about AX, but it's unlikely that it will ever be able to access a connected iPod.

1 0

INTEREST: Motorola/Apple Bring iTunes Player to Motorola’s Mobile Phones
by billing 27 Jul '04

27 Jul '04

Motorola and Apple Bring iTunes® Music Player to Motorola’s Next-generation Mobile Phones ROSEMONT, IL and CUPERTINO, Calif – 26 July 2004 -- Motorola, Inc. (NYSE:MOT) and Apple® (NASDAQ: AAPL) today announced they are partnering to enable millions of music lovers to transfer their favorite songs from the iTunes® jukebox on their PC or Mac® , including songs from the iTunes Music Store, to Motorola’s next-generation 'always with you' mobile handsets, via a USB or Bluetooth connection. Apple will create a new iTunes mobile music player, which Motorola will make the standard music application on all their mass-market music phones, expected to be available in the first half of next year. “We can't think of a more natural partnership than this one with Apple, the brand synonymous with easy-to-use, legal music downloading, and Motorola, the innovator in mobile technology,” said Ed Zander, chairman and CEO, Motorola. “Being able to transfer songs you’ve purchased from iTunes to Motorola mobile handsets expands the market reach for both of us and drives new revenue for customers, delivering an amazing music experience to millions of wireless users.” “We are thrilled to be working with Motorola to enable millions of music lovers to transfer any of their favorite songs from iTunes on their PC or Mac to Motorola’s next-generation mobile phones," said Steve Jobs, Apple's CEO. “The mobile phone market -- with 1.5 billion subscribers expected worldwide by the end of 2004 -- is a phenomenal opportunity to get iTunes in the hands of even more music lovers around the world and we think Motorola is the ideal partner to kick this off." About Motorola Motorola, Inc. (NYSE: MOT) is a global leader in wireless, broadband and automotive communications technologies that help make life smarter, safer, simpler, synchronized and fun. Sales in 2003 were U.S. $27.1 billion. Motorola creates innovative technological solutions that benefit people at home, at work and on the move. The company also is a progressive corporate citizen dedicated to operating ethically, protecting the environment and supporting the communities in which it does business. For more information, please visit www.motorola.com. About Apple Apple ignited the personal computer revolution in the 1970s with the Apple II and reinvented the personal computer in the 1980s with the Macintosh. Today, Apple continues to lead the industry in innovation with its award-winning desktop and notebook computers, OS X operating system, and iLife and professional applications. Apple is also spearheading the digital music revolution with its iPod portable music players and iTunes online music store.

1 0

INTEREST: Airport Express; Virtual PC 7; Interbrand: Apple brand value jumps 24 percent on iPod; pPod guide to London's public Loos
by billing 25 Jul '04

25 Jul '04

...from: http://www.nytimes.com/2004/07/22/technology/circuits/22state.html Apple's Pocket-Size Base Station By DAVID POGUE Published: July 22, 2004 IN his weekly "60 Minutes" commentary a couple of years ago, the inimitable Andy Rooney groused about the number of cables in our lives. "Look behind the television set in your living room. It's a rat's nest of electrical cords," he said. "All different - no two the same. If Thomas Edison was so smart, how come he didn't come up with one cord that fits everything?" Of course, it wouldn't be very hard for Mr. Rooney to answer his own question. To find out why cords are designed to fit only specific connectors, all he'd have to do is plug his headphones into an electrical outlet, just once. A slightly less painful approach might be for Mr. Rooney to look into Apple, a company with an official corporate disgust for cables. Apple was the first computer company to offer built-in Wi-Fi wireless antennas (also known as 802.11 - or, as Apple more charmingly calls it, AirPort). Apple was also the first company to offer built-in Bluetooth, a short-range wireless technology designed to eliminate the cords between computers, printers and other gadgets. And when a cable can't be eliminated, Apple goes to ridiculous extremes to at least make it good-looking and color-coordinated. Last week, Apple introduced yet another way to eliminate wires from your life. It introduced the AirPort Express, a $130 something-or-other for both Windows PC's and Macs. There's no single pithy term or phrase for this invention; it has more tricks up its sleeve than David Blaine. Trick No. 1: the AirPort Express is a wireless base station. That is, if you connect it to a cable modem or D.S.L. box, your wirelessly equipped Mac or Windows PC can get onto the Internet and connect to other machines in the building, at high speed and with no waiting, from anywhere in the house - or at least within about 150 feet of the base station, even through walls. (Note for geeks: Like all of Apple's current wireless gear, the AirPort Express uses the 802.11g standard - which, in English, means that it works with both modern, superfast 802.11g laptops and the older, more common, slower 802.11b equipment. It also offers both WPA and WEP security, state-of-the-art password-protection systems that prevent desperados hiding in your bushes from getting onto your wireless network without your knowledge.) If you already have an AirPort wireless network, the Express can act as a wireless bridge that extends its range another 150 feet. That's a handy perk, but it would be even handier and perkier if it worked to extend the range of other base station brands. (Apple won't guarantee that it doesn't work, but it won't guarantee that it will, either.) The twist here is that the AirPort Express is literally pocket-size. It's a round-cornered white acrylic device that looks for all the world like the power adapter for one of Apple's laptops. In fact, Apple says that the Express is the world's smallest Wi-Fi base station. Asus makes one whose dimensions are slightly smaller, but only if you ignore its external power brick; that's cheating. Apple's device is entirely self-contained. Apple has even eliminated the power cord, instead opting for electrical outlet prongs that rotate cleanly into the body when not plugged in. Now, you might reasonably wonder why the size of a wireless base station is an advantage. Isn't that an irrelevant characteristic, like a muffler that's available in designer colors? After all, most people just plug into a base station behind the desk and forget about it. But having your own personal base station means that you can move it from place to place (like home or office) at will; the Express can even store and switch among five different network configurations. And if you take it with you when traveling, you can sign up for your hotel's $10-a-day high-speed in-room Internet access. Then, instead of remaining shackled to the desk, you can lie on the bed 10 feet away to do your e-mail. (All right, that's not a life-or-death business essential, but you've got to admit that it's cozy.) More practically, your traveling companions can hop online simultaneously, sharing the Internet signal and the $10 fee. (The AirPort Express can handle up to 10 people at once. That's one difference between this model and Apple's standard AirPort base station, which costs $200 and handles up to 50 connections at once.) Trick No. 2 is called AirTunes. The AirPort Express has, of all things, a sound-output jack that you can connect to a stereo system, self-powered speakers or even a TV. iTunes, Apple's free jukebox software for Mac or Windows, can then wirelessly broadcast your music (like MP3 files and songs you've bought from Apple's iTunes online store) to the sound system from your computer. In fact, if you've bought more than one AirPort Express (in Apple's dreams!) and plugged them into different sets of speakers around the house, you can use a little pop-up menu on the edge of the iTunes window to specify which one you want: Patio, Living Room, Bedroom or whatever. To pacify the record companies, iTunes encrypts the music before broadcasting it, so that the sneaks in the next apartment can't intercept it. And to pacify audiophiles, the software delivers the music to the speakers at full original quality (as it's stored on your computer). It sounds terrific. There are, however, some flies in all this ointment. First, you can only send the music to one set of speakers at a time. Rival wireless-stereo gizmos, like RCA's Wireless Lyra, can broadcast simultaneously to several sound systems (if you've bought a receiver for each one). Second, note that the connection between the AirPort Express and the stereo is not wireless. You have to supply your own cable to connect them. (Apple sells a $40 kit containing two beautiful white Monster cables for connecting to your stereo - one with standard RCA stereo connectors and one with a so-called Toslink, a digital connector capable of carrying five-channel surround sound.) But the point is that the AirPort Express needs a power outlet that's close to your stereo. Finally, it's a weird and heady experience to use, say, your computer upstairs as the control center for the stereo across the room, complete with playlists and real-time volume control. On the other hand, if you're downstairs with the stereo, you can't pause playback when the phone rings, see the name of the current song, or skip a truly awful song, without having to run upstairs to the computer. (This fine print, of course, applies to most wireless sound systems.) Trick No. 3: On the bottom of the AirPort Express you'll find, of all things, a U.S.B. connector where you can plug in an inkjet printer, and then every computer on the network can send printouts to it wirelessly. It works like a charm, and offers further proof that Macs and PC's in the same household can all be friends. (This feature requires Mac OS X, Windows 2000 or Windows XP.) Now, as the usual crowd of Apple-grouches is certain to point out, you could buy each of the Express's features for less money. A regular 802.11g base station costs about $60 at www.buy.com. If your aim is to extend your existing network's range, you can buy a range extender from Linksys or D-Link for $80. The idea of streaming music from a PC wirelessly to a stereo isn't new, either; Linksys and many others sell wireless media adapters for another $80. But Apple is the first to combine all of these functions, effortlessly and elegantly, and the fact that the Express comes with supremely simple setup software, looks great and fits in your pocket or laptop carrying case is just Wi-Fi gravy. Apple reports having 80,000 AirPort Express pre-orders to fill, and stores are reporting at least a three-week wait to get one. Rack up a point for Apple in its mission to dominate the digital music world (and, not incidentally, to infiltrate the homes of Windows PC owners), and rack up one for Andy Rooney and the rest of us in the never-ending battle against household cable infestations. E-mail: Pogue(a)nytimes.com ====================== ...from: http://maccentral.macworld.com/news/2004/07/22/virtualpc7/?lsrc=mcrss -0704 Microsoft: Virtual PC 7 coming this October By Peter Cohen pcohen(a)maccentral.com July 22, 2004 6:05 pm ET Microsoft Corp. on Thursday indicated that Virtual PC for Mac Version 7 will likely be released in October, though the schedule is entirely dependent on Microsoft's efforts to ship a new service pack for its Windows XP operating system. This is the first clarification the company has provided about Virtual PC 7's release schedule since confirming in May that its release would be delayed. Virtual PC enables Mac users to run various versions of Windows software applications and operating systems by emulating the characteristics of an actual hardware PC on their Macintosh. Previously sold by Connectix Corp., Virtual PC was acquired by Microsoft in February, 2003. Mac users have been anticipating Virtual PC 7's release as it will be the first version to support Power Mac G5 computers -- the emulation software needed to be extensively retooled to work with the IBM PowerPC 970 microprocessors that power the G5. Announcing Virtual PC 7's delay in May, Microsoft's Mac Business Unit (MacBU) indicated that the software would be released "in the second half of 2004." On Thursday, Microsoft offered further clarification in a statement sent to news media. "We are waiting for the release of Windows XP SP2 in order to offer the most recent, most secure version of Windows XP to our Virtual PC for Mac customers. Windows XP SP2 release has moved to August, which has impacted our schedule. Based on this, we anticipate that Virtual PC 7 with Win XP Professional and Home will release to manufacturing in September and be on store shelves by early October," read the statement. "Virtual PC 7 with Windows 2000 and the Standalone and Upgrade versions will be available a few months after this debut," said the company. "Should the Windows XP SP2 release date change the Virtual PC 7 availability date will change accordingly." ====================== ...reported by MacCentral from: http://maccentral.macworld.com/news/2004/07/23/interbrand/?lsrc=mcrss -0704 Interbrand: Apple brand value jumps 24 percent on iPod By Peter Cohen pcohen(a)maccentral.com July 23, 2004 9:25 am ET Apple may be one of the most recognizable brands in the world, but what's that brand's actual value? Market brand consultancy Interbrand and business publication BusinessWeek have posted their fourth annual listing of 100 Best Global Brands, listed by dollar value. Apple is the biggest mover on this year's chart, up 24 percent in brand value. The consultancy attributes Apple's showing to strong sales of the iPod and high brand loyalty. Apple ranked 43rd overall, up from 50 last year. Interbrand indicates that Apple's brand value for 2004 totalled $6.851 billion, up from $5.554 billion, or a 24 percent annual rise. Overall, Apple ranks in the same vicinity as motorcycle maker Harley-Davidson, food company Heinz, fashion company Louis Vuitton, financial institution UBS and video game maker Nintendo. Coca-Cola, Microsoft Corp., IBM, GE, Intel, Disney, McDonald's, Nokia, Toyota and Marlboro made up the top ten list of best global brands. Interbrand calculates the global brand value of these companies as the net present value of the earnings that the brand is expected to generate from July 1, 2003 to June 30, 2004. The 100 most valuable global brands were determined by whether they produced significant earnings in global markets and if there was sufficient marketing and financial data publicly available to prepare a reasonable valuation. ======================= ...from: http://www.nykris.com/template.php?id=64 pPod 21 July 2004 - Today NYKRIS launched pPod - the world’s first iPod based interactive audio service. pPod combines text, spoken word audio, and music to deliver a guide to London’s public loos – truly a convenience for iPod users on the move! Entertaining audio reviews and even accompanying sound tracks such as Handel’s ‘Water Music’ and ‘Cosmic Winds’ will help users to locate their nearest (and loveliest!) loos. Instructions To get pPod onto your iPod first download the NYKRIS_pPod.zip file by clicking the 'download pPod' link at the bottom of this screen Unzip file, then open 'Install.txt' for full installation instructions Please note: This service will only work on third-generation or higher iPods NYKRIS specialise in making engaging and easy to use interactive services across the web, interactive kiosks and mobile devices. Philip Read, NYKRIS' managing director said ‘We’re all aware that opportunities to deliver interactive services are developing all the time, with new types of PDA, mobile phone and MP3 player hitting the market every month. NYKRIS’ work is all about creating the best type of interactive experience no matter what sort of device we’re delivering to. Working on a service like this is an excellent opportunity for us to think about how interactive services might be developed for the iPod – a device that has so far been used primarily for portable audio.’ ‘We’re currently exploring other iPod based services that could be developed, including an interactive audio guide to gigs and clubs – something that we think could be particularly attractive to iPod fans.’ Philip Read, Managing Director

1 0

INTEREST: Duke U gives students iPods, HP/Apple iPods
by billing 19 Jul '04

19 Jul '04

...from: http://maccentral.macworld.com/news/2004/07/19/duke/index.php? redirect=1090243274000 Duke to give incoming freshmen iPods By Peter Cohen pcohen(a)maccentral.com July 19, 2004 11:20 am ET On Monday Apple introduced its fourth generation iPod, a 20GB or 40GB model featuring the same kind of "Click Wheel" interface as found on the iPod mini. During an interview with MacCentral, Greg Joswiak, vice president of Hardware Product Marketing at Apple, explained that Duke University would be offering iPods to incoming freshmen. New details about the program have come to light. On August 19, 2004, Duke University will be distributing more than 1,600 20GB iPods to all incoming freshman during their orientation as part of an effort to "creative uses of technology in education and campus life," according to a statement. Another 150 are slated for other academic and support needs, and all of them become the property of their recipients. Computer ownership isn't mandatory for incoming freshmen, so Duke will enable those students to hook up their iPods to computers at labs around campus. The iPods will be preloaded with content related to Duke campus life, including freshman orientation information and the academic calendar. What's more, a special Duke Web site modeled on Apple's own iTunes site will offer course content for download, including language lessons, music, recorded lectures and audio books. Duke students will also be able to purchase music through the site. This is a pilot program between Duke University and Apple, which will be evaluated after a year. It's being paid for by Duke using strategic planning funds that have been set aside for one-time purposes, rather than with funds that might otherwise have been used for other operational programs. Duke Vice President for Information Technology Tracy Futhey said the University is hoping that the iPod program will motivate students and faculty alike to use iPods as educational tools. "We think the power and flexibility of these devices offer some real advantages over other media used to distribute educational content such as CD-ROMs and DVDs," said Futhey. ================= ...from: http://www.macminute.com/2004/07/19/hpipod HP iPod to be released in September July 19, 2004 - 10:53 EDT HP and Apple announced today that the HP-branded iPod will be available in September. "HP has chosen iPod and iTunes as the best products to integrate in to our digital entertainment strategy," said HP CEO Carly Fiorina. "We decided to wait for this amazing new fourth generation iPod, as it will offer our customers an even better experience. HP's version of the new iPod will be available in September." In early January, HP said that it would begin selling a branded version of Apple's iPod and bundling iTunes with its desktops and notebooks as part of a new partnership with Apple =================

1 0

FYI: iPod and iPod mini Update: iTunes 4.5, one click shuffle play, support for Lossless Encoder
by billing 19 Jul '04

19 Jul '04

Get iPod and iPod mini Update iPod Updater 2004-07-15 supports all models of iPod and iPod mini, including the new Click Wheel iPod. This update includes the latest available software for each model of iPod or iPod mini. Download and install the iPod Updater 2004-07-15 then connect your iPod or iPod mini to yor computer. The iPod Updater will automatically determine if an update is required. New for Click Wheel iPods ▪ Shuffle songs with one click ▪ Create multiple On-The-Go playlists ▪ Delete songs from On-The-Go playlists ▪ Select reading playback speed for audiobooks ▪ Hear the clicker user interface sound through headphones ▪ Charge via USB 2.0 connection ▪ Enjoy improved playback performance Updates for iPod with a Dock connector and iPod mini ▪ Compatibility with iTunes 4.5 or later and the iTunes Music Store ▪ Improved playback performance ▪ Support for the Apple Lossless Encoder, to enable compressed music encoding at high quality Updates for iPod without a Dock connector ▪ Compatibility with iTunes 4.5 or later and the iTunes Music Store ▪ Improved playback performance http://www.apple.com/ipod/download/

1 0

INTEREST: Microsoft Windows Mozilla/Firefox/Thunderbird security issue
by billing 12 Jul '04

12 Jul '04

...from: http://www.mozilla.org/security/shell.html What Mozilla users should know about the shell: protocol security issue On July 7 a security vulnerability affecting browsers for the Windows operating system was reported to mozilla.org by Keith McCanless, and was subsequently posted to Full Disclosure, a public security mailing list. On the same day, the Mozilla security team confirmed the report of this security issue affecting the Mozilla Application Suite, Firefox, and Thunderbird and discussed and developed the fix at Bugzilla bug 250180. We have confirmed that the bug affects only users of Microsoft's Windows operating system. The issue does not affect Linux or Macintosh users. On July 8th, the Mozilla team released a configuration change which resolves this problem by explicitly disabling the use of the shell: external protocol handler. The fix is available in two forms. The first is a small download which will make this configuration adjustment for the user. The second fix is to install the newest full release of each of these products. Instructions on administering these changes can be found below. How to update Mozilla, Firefox and Thunderbird users on Microsoft Windows operating systems should update in one of the following ways. • To install the security patch for Mozilla or Firefox, follow these instructions: 1. Click Install Patch. 2. In the Software Installation window, click the "Install Now" button. 3. Exit and restart your Mozilla or Firefox browser. • To verify the fix in your Firefox or Mozilla application, be sure to restart the browser and then follow these steps: 1. Type about:config into the address field and hit Enter. 2. In the Filter toolbar, type shell. 3. Look for the preference listing network.protocol-handler.external.shell. 4. If you see the preference listed with the value of false then your application has been patched. • To install the security patch for Thunderbird, follow these instructions: 1. Right-click the Patch and choose save link as. 2. Save the file, shellblock.xpi, to your Desktop. 3. In Thunderbird, go to the Tools menu and select the Extensions item. 4. In the resulting Extensions window, click the "Install" button. 5. Use Windows file picker to select the shellblock.xpi file from your Desktop and click OK to dismiss the file picker. 6. Click OK on the Software Installation window. 7. Exit and restart Thunderbird. • To download and install new Mozilla releases releases, follow the instructions below: 1. Download Mozilla 1.7.1 to your Desktop and double-click the mozilla-win32-1.7.1-installer.exe icon. 2. Follow the instructions in the Mozilla Install wizard. 1. Download Firefox 0.9.2 and to your Desktop and double-click the FirefoxSetup-0.9.2.exe icon. 2. Follow the instructions in the Firefox Install wizard. 1. Download Thunderbird 0.7.2 to your Desktop and double-click the ThunderbirdSetup-0.7.2.exe icon. 2. Follow the instructions in the Thunderbird Install wizard. We value our users' safety and security and will continue to make all efforts to release secure products and respond quickly when security vulnerabilities are identified in our software. Future versions of Mozilla Firefox will include automatic update notifications, which will make it even easier for users to be alerted to security fixes. The Mozilla Security Team would like to thank Keith McCanless for the original bug report and test case, and apologize for incorrectly omitting mention of his report in the initial version of this document.

1 0

FYI: Remote Desktop Connection Client for Mac controls Windows
by billing 09 Jul '04

09 Jul '04

...from: http://www.microsoft.com/mac/otherproducts/otherproducts.aspx? pid=remotedesktopclient Remote Desktop Connection Client for Mac Remote Desktop Connection Client for Mac allows you to connect from your Macintosh computer to a Windows-based computer and work with programs and files on that computer. With Remote Desktop Connection Client for Mac, you can: • Access everything available for Microsoft® Windows® from your Macintosh desktop. • Copy and paste information between Macintosh and Windows programs. • Print from Windows programs to the printers connected to your Macintosh. • Use Windows terminal servers to provide groups of Macintosh users in the workplace with access to Windows-only programs. To connect to a Windows-based computer, you need network access and permissions to connect to the computer, and the computer must be running Terminal Services or Remote Desktop Services. The following Windows products support Remote Desktop connections: • Windows XP Professional • Windows Server 2003 • Windows 2000 Server • Windows 2000 Advanced Server • Windows 2000 Datacenter Server • Windows NT® Server 4.0, Terminal Server Edition Download at: http://www.microsoft.com/mac/downloads.aspx?pid=download&location=/mac/ DOWNLOAD/MISC/RDC.xml&secid=80&ssid=9&flgnosysreq=True Last Updated: May 05, 2004

1 0