Sunday, March 30, 2008

Safari for Windows: Only for 'Apple-labeled' computers?

Apple, it seems, hasn't totally gotten used to making browsers for this Windows thing.

The license terms for the company's Safari Web browser on Windows include a curious restriction: "The software allows you to install and use one copy of the Apple Software on a single Apple-labeled computer at a time."

(Credit: The Register)

The Register, which was tipped off by legal eagles at the Italian site settleB.IT, calls the terms a "mockery of end user agreements."

Apple last week caught a lot of flak from users and from Mozilla, which makes the rival Firefox browser, for its practice of offering Safari for Windows as part of its auto-update service for iTunes.

Let's see how many millions of Safari for Windows downloads there are before Apple's legal corps tweak their language to cover exotic things like, you know, Windows PCs.

Update 7:11 AM Pacific: After seeing this blog, an editor at settleB.IT informs me that the Apple license has been updated so that Windows PC users can install Safari without fear of violating any licenses. He says the change occurred overnight Wednesday to Thursday European time.

If you have good eyes, you can see the different versions: before and after.

http://www.news.com/

China Law Could Impede Microsoft Deal for Yahoo

SAN FRANCISCO — Microsoft’s hostile-takeover attempt against Yahoo may encounter an unexpected hurdle in August after a Chinese antimonopoly law takes effect that will extend the nation’s economic influence far beyond its borders.

The law, which goes into effect on Aug. 1, is intended to strengthen an existing set of antitrust regulations the Chinese originally established in 1993. It will make China a third sphere of regulatory influence, matching the power of the European Union and the United States, according to legal specialists in this country and in China who have studied it.

Formally enacted by the National People’s Congress last year, the measure gives Chinese regulators authority to examine foreign mergers when they involve acquisitions of Chinese companies or foreign businesses investing in Chinese companies’ operations. Beijing could also consider national security issues, according to a report by the official news agency Xinhua.

The law could give China influence in Microsoft’s courtship of Yahoo because in August 2005, Yahoo, a premier search portal, invested $1 billion in Alibaba.com, China’s largest e-commerce business. The investment gave Yahoo about a 40 percent stake in the Chinese company. Alibaba officials have said they believe that a Microsoft takeover of Yahoo would set in motion a buyback provision, making it possible for them to gain independence from Microsoft.

Nathan G. Bush, an antitrust law specialist with O’Melveny & Myers in Beijing, said the law represented the ascendance of China “as another regulatory capital contending for influence with Brussels and Washington.”

“Multinational corporations will need to develop strategies for all the markets they operate in,” he added, “and China is a big market.”

Whether China would seek to review a Microsoft acquisition, and what kind of posture it might take, would be closely watched by regulators and global companies as an indication whether it will play a conciliatory or a nationalistic role on the world stage.

“I don’t think anyone has worked through the issue of where an Internet merger should be reviewed, given that it truly is a World Wide Web,” said Andrew I. Gavil, a law professor at Howard University.

There are potentially dozens of jurisdictions that could claim oversight in such a deal because of the global business interests of the two huge companies and because it could potentially transform the Internet into two megaportals, Google and Microsoft. Other parts of the world that might have an active interest in the outcome of a merger include South Korea, a vibrant Internet economy where an antitrust investigation into Microsoft was previously opened.

Executives at Microsoft and Yahoo declined to comment on the possible effect of the new Chinese law. In rejecting Microsoft’s takeover bid in January, Yahoo’s chief executive, Jerry Yang, said in a letter to employees that the offer substantially undervalued the company, in part because of the significant growth potential of the Alibaba business in China.

The issue of whether the Beijing authorities will harmonize the law with foreign antitrust laws or use it to fire a shot across the bow of global businesses was sharpened last week after an effort by Huawei Technologies to invest in 3Com collapsed in the face of national security concerns in Washington.

The Committee on Foreign Investment in the United States had examined the purchase, through which Huawei would have gained a stake in 3Com. The American company’s Tipping Point subsidiary makes Internet intrusion-detection software, a technology that the United States maintains has national security implications.

Before the attempted investment fell apart, senior Chinese officials were quoted as saying they thought that the deal did not have national security implications, and that American regulatory efforts were a cover for protectionist trade practices.

National security has played a role in other attempted deals involving Chinese companies. In 2005, the Chinese National Offshore Oil Corporation made a high bid to acquire Unocal, leading to a vote in the House of Representatives to block the deal. Soon afterward, the Chinese company, known as Cnooc, withdrew its bid and Unocal was acquired by Chevron.

In the case of the proposed Microsoft-Yahoo transaction, the Chinese have in recent years become more and more alert to the role the Internet plays in their economic and political affairs.

Last week, a vice minister in the State Council Information Office, which oversees the Internet, said there were 230 million Chinese users of the Internet. He said the Internet sector accounted for 7 percent of the country’s gross domestic product, and he expected that to rise to 15 percent in three to four years, according to a Reuters report.

The official, Cai Mingzhao, warned that foreigners should not use the Internet to interfere in Chinese internal matters, according to a report in The Guardian.

Even if the Chinese government did not try to prevent a takeover by Microsoft, a prolonged review could substantially damage the value of the business, a number of Internet industry executives said.

http://www.nytimes.com/

AT&T Announces Mobile TV Service

AT&T announced today that the nation's largest wireless carrier will offer subscribers ten channels of live, mobile TV on at least two new phones starting in May.

AT&T Mobile TV uses Qualcomm's MediaFLO system, which we reviewed last year with two Verizon phones. The MediaFLO system allows for at least 14 channels. AT&T and Verizon will share eight: CBS, Comedy Central, ESPN , FOX, MTV, NBC, NBC News, and Nickelodeon. AT&T will get two exclusive channels of their own, which Verizon customers won't have access to.

Verizon, for its part, added two exclusive channels this week: ESPN Radio and a Latino-focused MTV spinoff, "MTV Tr3s".

MediaFLO channels aren't simulcasts of broadcast TV. Rather, they're rearrangements of the TV schedule to play popular programs several times a day. Late night talk shows pop up during morning commuting hours, for instance, and the NBC channel mixes in both NBC network programs and popular shows from NBC's Bravo cable channel.

Since AT&T uses the exact same mobile TV network as Verizon, we expect quality to be the same (excellent, just like 'regular' TV) and pricing plans to be the same (around $15/month.)

The Samsung Access will be AT&T's more conventional, and presumably more affordable, TV phone. The Access is a small, slim candy-bar phone with a 2.3-inch screen and 1.3-megapixel camera. Like several other Samsung phones on AT&T, it features the Video Share service which lets you beam live video to people you're calling. Using the 850/1900 Mhz 3G bands and quad-band EDGE, it can hit AT&T's high-speed network here in the US and it roams to Europe at lower data speeds.

The LG Vu will offer a higher-end mobile TV experience. That phone is dominated by a 2.8-inch, 240-by-400 touch screen, and it has a 2-megapixel camera and full Web browser. The Vu's interface is very similar to the LG Prada, which has an attractive interface of large, touch-screen icons and which vibrates when you touch a virtual key. To type messages on the touch screen, you can choose between a virtual QWERTY keyboard and a virtual phone keypad with predictive text. Like the Access but unlike the Prada, the Vu hits AT&T's high-speed 3G network and also roams globally on EDGE.

We expect the Vu to get good mobile TV reception because it also has a huge, pull-out TV antenna. That strategy worked well for the LG VX9400, which has the best reception of Verizon's MediaFLO TV phones.

AT&T didn't announce pricing for the phones or service, but we're sure to hear more at next week's CTIA Wireless trade show.

http://www.pcmag.com/

Flash flaw leads to Vista laptop's fall

It held out as long as possible, but a Windows Vista laptop fell to a determined bunch of hackers Friday evening at the Pwn to Own contest at CanSecWest.

Since it was the third day of the contest, which saw a MacBook Air get hacked on Thursday, the TippingPoint Zero Day Initiative relaxed the rules even further. On the first day of the contest, only the operating system could be targeted, but on the second day that was expanded to include standard applications. An undisclosed Safari flaw led to the MacBook Air's downfall.

TippingPoint's Aaron Portnoy, with Shane Macauley and Alexander Sotirov (left to right) take control of a Windows Vista laptop.

(Credit: TippingPoint)

But on Friday, hackers could target any "popular" piece of application software that you might find on a system. The Fujitsu laptop, running Vista Ultimate, was compromised by a previously undiscovered flaw in Adobe's Flash software.

Shane Macaulay, Derek Callaway and Alexander Sotirov, were able to gain control of the laptop, which also means they get to keep it. However, since the rules had been relaxed, they only get $5,000; the MacBook Air winners collected $10,000.

The contest rules stipulated that any winner sign a nondisclosure agreement immediately after a successful hack, so that the nature of the flaw could be disclosed to the vendor. Once Adobe and Apple patch their flaws, the nature of the flaw will be disclosed.

A Sony Vaio laptop running Ubuntu remained unscathed at the end of the conference.

http://www.news.com/

Windows Desktop Search 4.0 Preview for Windows XP

This is a pre-release of Windows Desktop Search 4. Windows Desktop Search 4 helps you preview documents, e-mail messages, music files, photos, and other items on the computer faster. It supports the Encrypting File System (EFS), reduces the affect on Microsoft Exchange when you index e-mail in online mode, and improves indexing performance with faster speeds.

Note: Beta or prerelease software is not intended for inexperienced users, as the software may contain bugs or may potentially damage your system. We strongly recommend that users exercise caution and save all mission-critical data before installing this software.

Download

Only Ubuntu left standing, as Flash vuln fells Vista in Pwn2Own hacking contest

CanSecWest A laptop running a fully patched version of Microsoft's Vista operating system was the second and final machine to fall in a hacking contest that pitted the security of Windows, OS X and Ubuntu Linux. With both a Windows and Mac machine felled, only the Linux box remained standing following the three-day competition.

Shane Macaulay, who played a hand bringing down a Mac during last year's Pwn2Own contest, defeated the Vista machine using a previously unknown vulnerability in Adobe Flash. On final day of the CanSecWest conference in Vancouver, Macaulay spent the better part of four hours trying to get the exploit to work. (The delay prompted one spectator to playfully dub the difficulty "hacktile dysfunction.")

A MacBook Pro running a fully patched version of Leopard was the first to drop out during day two of the race, when researchers from Independent Security Evaluators demonstrated a previously unknown vulnerability in Apple's Safari browser. With brand new boxes running both Ubuntu and Vista remaining, Macaulay spent day three switching back and forth between the two machines, trying to get his Flash exploit to execute properly. He was assisted by Alex Sotirov, a security researcher at VMware.

Initially thwarting Macaulay's efforts was the recently released Service Pack 1 for Vista, which he had neglected to install when testing the Flash exploit in the days leading up to the contest. Per the contest rules, each target machine had to be fully patched, and when the researcher first ran the code during the competition, new page protections added by Microsoft's security team prevented the exploit from properly executing.

"They had done some stuff in Vista to prohibit this form of attack from being successful on third party software," Macaulay said minutes after he finally commandeered the Fujitsu U810 laptop. "We had to do some porting to get around that issue."

Macaulay and Sotirov fashioned some javascript to circumvent the new measure, a feat that effectively allows them "to render that protection ineffective," Macaulay said.

It also allows them to pocket a $5,000 bounty from Tipping Point's Zero Day Initiative and keep the pricey Fujitsu laptop. Macaulay said he would probably sell the machine, which he and Sotirov autographed with a black Sharpie pen, on eBay.

Under contest rules, qualifying exploits on day one had to target default installations of the operating system itself and winners were allowed to walk away with the hacked box and a $20,000 bounty. Contest organizers gradually expanded the eligible attack surface on days two and three by allowing an vulnerabilities in an increasing number of third party applications. The bounty dropped to $10,000 on day 2 and $5,000 on day three. No one bothered competing on day one.

Plenty of commentators have made hay of the MacBook Pro being the first to exit the race, and Linux zealots are sure to conclude the contest results prove the superiority of that platform. Maybe. But that's not how it looks to Macaulay, who says with a few hours of tweaking, his exploit will also work on OS X and Linux.

The better take-away is that exploits like these are a fact of life for everyone no matter what kind of machine they choose (are you listening, Mac Guy?). Another lesson: just as quickly as Microsoft or any other developer adds new measures like page protection to their code base, hackers, ethical and otherwise, are find ways to work around them.

"Nobody can do anything about it, because you're always going to be installing something" that will bypass security, Macaulay, who wore torn blue jeans and a Puma jogging jacket, said with a shrug. "If it's not Java, it'll be something else." ®

http://www.theregister.co.uk/

Time to get a life, Windows eats all my free time

I've been spending a lot of what should be my free time lately writing applications and designing a system to automate Windows XP Pro desktop system configurations for work. The system starts running on a USB flash drive that is running a generic OS image compiled using Windows XP Embedded. It uses no system specific drivers, just standard NT interface drivers. It works on every piece of hardware that supports USB-HDD. It boots up to a command prompt that is also the entire user interface. Deliberately there is no GUI. The entire OS image compared to XP Pro is fairly small, less than 230 megabytes even with a dotNet 2.0 runtime package. There is no Explorer shell. The security and local-user package has not been added to the system.

No user logon is necessary. Yet remarkably its also relatively secure. No remote connections to it can be made. No networking services outside of Workstation, meaning it has no server functions. The NIC driver is installed using an executable program, no Plug-n-Play install. Video is simply the text mode equivalent of the 1024x768 Safe mode generic driver. It has no printer functions, no web browser, no ActiveX support and no NetBios browsing. The IE6 hooks for http and other TCP/IP protocols is disabled. Even at the command prompt the User has no usable access to the networking dlls or executables.

The Win XPE system image on the USB drive boots up and connects to a network connected server to pull images of the operating system down to the system the USB flash drive is plugged into. Before the OS image is copied, the USB flash drive runs a number of routines set to partition, format and run chkdsk /f on the newly NTFS formatted partitions on the installed hard drive. So it does a complete “bare metal” hard drive installation for systems used in our rental fleet of computers. The installed image is based on a volume licensed XP Pro image that essentially replaces a licensed OEM image. It requires a little more bookeeping and costs a little more but the advantage to our company is a consistent XP Pro system image installation. Application software is installed in a second downloaded package that runs as a Windows installation package.

The configuration application using VB.Net is a single form Windows application (not a console application!) with the user interaction limited to checking 6 radio buttons in 6 different group-boxes and a single 5 digit serial number textbox and a few command buttons. Add a little bit of input validation and exception handling code and you're done. Nothing earthshaking. What astonished me was that it started and ran error-free on the command prompt based XPE image using a MSDOS batch file! Its like running a 32 bit DOS machine.

What I discovered is that this form of Windows XP Embedded runs quite well. Even with its generic NT style drivers, its extremely fast when compared to the full-tilt GUI version of Windows XP Pro SP2. It can be shut off like a DOS system, in other words by flipping off the power switch, no shutdown ritual! It loads and starts up from a USB flash drive in 30 seconds. If you see a cmd (like a MSDOS) prompt, you just hit the power switch to “shutdown” the computer. Nice. The OS image on the drive stays pristine unless you save a file to the USB drive. Why can't Microsoft deliver a GUI assisted system like that? Its as close to a bash Linux install you can get from the Red(mond) Gorilla unless you want to resurrect your set of 5.25” disks of MSDOS 6.22.

http://community.zdnet.co.uk

Carmichael Crusher: Elementary School Suffers Two Break-Ins In One Week

Faculty, parents and students at a Carmichael elementary school were in disbelief this weekend after being burglarized twice in the same week.

Last week, someone broke into a classroom at Garfield Elementary School and stole $200 from a class treasury. While the loss was significant, Garfield administrators said it paled in comparison to a second strike Thursday night. This time, thieves made off with 32 brand-new Apple Macintosh laptop computers.

"What really gets me is most people wouldn't run up to a kid and grab a cookie out of their hand. These computers were for students and children. The people who took them stole from children," Garfield principal Anne Birchfield said.

Birchfield said the crooks clearly knew what they were doing, using power tools to break in the mobile computer lab and make off with the computers in less than five minutes. The computers were worth nearly $35,000, Birchfield said.

The school put out a special phone message to parents Friday, asking anyone to keep an eye out for anything suspicious or anyone trying to sell a large quantity of computers.

Sacramento County Sheriff's investigators are looking into the theft.
http://www.news10.net/
Tags: