Apple Goes Down In Court

Apple has lost a move in US District Court in San Francisco to keep some of its software ‘secrets’ out of view of the public.

It had asked Judge William Alsup to keep documents sealed that had surfaced in its lawsuit against Psystar, Bloomberg reports. The information about Apple’s Mac OS X operating system covers topics such as technological protection measures, system integrity checks and thermal management techniques.

The court turned down Apple’s request, however, noting that the company didn’t deny that the information was already public or claim that it had been misappropriated. Apple had argued that it still deserved trade secret protection because it didn’t release the information and had never confirmed it, but that didn’t convince Judge Alsup.

The information at issue is available on a web site about the Mac OS X operating system, the judge noted, adding that Apple’s decryption key haiku is available to any user that compiles and runs publicly available source code on a Macbook Air laptop.

.

Source…

Is Samsung Flip Flopping?

Samsung is apparently rethinking its decision not to bring Android 4 to the Galaxy S and Galaxy Tab.

Earlier the company stated that neither device could be updated due to the size of Samsung’s TouchWiz interface. The news created a bit of an issue with users sharpening scythes, pitchforks and lighting torches to go on a lynching. Now word on the street is that the company is considering backing down on its decision due to “strong customer demand.”

Source…

Kindle Fire Raises Privacy Concerns

Amazon told a Massachusetts congressman that the Silk browser in its Kindle Fire tablet doesn’t pose a privacy threat to customers, but the lawmaker wasn’t satisfied with that statement.

U.S. Rep. Ed Markey (D-Mass.), the co-chairman of a congressional caucus on consumer privacy, on Tuesday released the results of questions he had put to Amazon CEO Jeff Bezos in October about Silk and the data it collected.

Markey wasn’t happy with Amazon’s answers.

“Amazon’s responses to my inquiries do not provide enough detail about how the company intends to use customer information, beyond acknowledging that the company uses this valuable information,” said Markey in a statement.

“Amazon states ‘Customer information is an important part of our business,’ but it is also important for customers to know how the company uses their personal information,” Markey continued. “Amazon is collecting a massive amount of information about Kindle Fire users, and it has a responsibility to be transparent with its customers. I plan to follow-up with the company for additional answers on this issue.”

Silk, which is based on the open-source WebKit engine, connects to Amazon’s cloud service and servers by default. The service will handle much of the work of composing Web pages, pre-rendering and pre-fetching content, and squeezing the size of page components, a way, claimed Amazon, to speed up browsing on low-powered devices like the Kindle Fire.

Source….

DoJ Charges Clickjacking Perpetrators

The U.S. Department of Justice is charging seven individuals with 27 counts of wire fraud and other computer-related crimes, accusing the group of hijacking 4 million computers across 100 countries in a sophisticated clickjacking scam.

According to the indictment, the defendants had set up a fake Internet advertising agency, entering into agreements with online ad providers that would pay the group whenever its ads where clicked on by users. The group’s malware, which it had planted on millions of user computers, would redirect the computers’ browsers to its advertisements, thereby generating illicit revenue.

The malware worked by capturing and altering the results of a user’s search engine query. A user would search for a popular site, such as ones for Netflix, the Wall Street Journal, Amazon, Apple iTunes and the U.S. Internal Revenue Service. Whenever the user would click on the provided link, however, the browser would be redirected to another website, one that the group was paid to generate traffic for.

The malware the group used also blocked antivirus software updates, which left users vulnerable to other attacks as well, according to the DOJ.

Source…

Google, which last week created a bit of chaos with the launch of a Gmail application for Apple iOS devices, has decided to put out discontinue its Gmail application for the BlackBerry.

As of Nov. 22, Google will no longer offer technical support to users of the application, nor will it allow people to download it anymore, the company wrote in a blog post.

However, people will be able to continue using it, although Google will put its development efforts on the version of the application for mobile browsers, available at gmail.com.

Source…

Google Search To Add Default Encryption

Google is implementing over the next few weeks default encryption using SSL on searches for users signing in with their accounts, the company said Tuesday.

The move comes over a year after Google made SSL the default setting for Gmail, and also unveiled an encrypted search service.

“As search becomes an increasingly customized experience, we recognize the growing importance of protecting the personalized search results we deliver,” Google’s product manager, Evelyn Kao said in a blog post on Tuesday.

The encryption is expected to be particularly useful for people using an unsecured Internet connection, such as a Wi-Fi hotspot in an Internet cafe, Kao added.

With Google search over SSL, users get an end-to-end encrypted search channel between their computer and Google. The secured channel helps protect search terms and search results pages from being intercepted by a third party, Google said in a description of SSL search.

Over the next few weeks, users will be redirected to a secure search site when they are signed in with their Google Account. The change encrypts search queries and Google’s
results page.

Users can also navigate directly to the secure search site if they are signed out or don’t have a Google Account.

Source…

Websites ‘Leaking’ User Info To Other Firms

Many top websites share their visitors’ names, usernames or other personal information with their partners without alerting users and, in some cases, without knowing they’re doing it, according to a new study from Stanford University.

Many websites “leak” usernames to third-party advertising networks by including usernames in URLs that the ad networks can see in referrer headers, said the study, released Tuesday by Stanford Law School’s Center for Internet and Society. While there’s a debate in legal circles whether usernames are personal information, there’s a growing consensus among computer scientists that Web-based companies can use usernames to identify their owners, said Jonathan Mayer, a Stanford graduate student who led the study.

“The vast majority of usernames are unique,” he said. “Given the prevalence of social networking, often times, once you have a username for a social network, you then also have a person’s real name, possibly a photo, possibly more.”

Other websites share first names, email addresses and other information with advertising or other partners, Mayer said at a privacy conference in Washington. Those identifiers “get associated not just with what you’re doing right now, but get associated with what you’ve done in the past, and what Web browsing activity you may have in the future,” he said.

Source….

Will AOL Merge With Yahoo?

AOL is trying to engineer a merger with Yahoo in order to lower costs.

AOL’s CEO Tom Armstrong reportedly has been working hard to generate support from shareholders for a deal with Yahoo. According to Reuters, Armstrong is presenting the deal as an alternative to going it alone as an internet media company in order to reap cost and advertising reach benefits.

Apparently Armstrong is claiming that a merger with Yahoo, which itself is at the centre of acquisition rumours, would bring in savings of between $1bn and $1.5bn by combining datacentres and consolidating content on areas such as news, sports, entertainment and finance.

Since AOL was spun out of its disastrous merger with Time Warner, the firm has been trying to remake itself into an internet media company by buying popular websites such as The Huffington Post and Techcrunch. While many question whether that is a workable plan, the financials can’t mask the deep trouble AOL is in, with the company reporting a $11.8m loss for the second quarter.

While talk of AOL being bought up has cooled considerably in the last few months, the firm still has a few worthwhile assets. According to Reuters’ sources, shareholders like the idea of merging with Yahoo but are not convinced that Armstrong can pull it off.

Source….

Microsoft Goes After Yahoo

Just three years after a failed attempt to acquire Yahoo, Microsoft may be considering whether to give it another shot, Reuters reported today.

According to the report, Microsoft executives are split on whether the company should bid for Yahoo. A final decision has not been reached, the report noted.

Citing an unnamed “high-ranking Microsoft executive,” the report said Microsoft is evaluating whether to pull in a partner for a joint effort to buy Yahoo.

Microsoft said it doesn’t comment on rumors or speculation. Yahoo didn’t respond to a request for comment on the report.

“As long as Microsoft is committed to growing its online presence, this makes sense,” said Ezra Gottheil, an analyst with Technology Business Research. “Yahoo has a large number of subscribers and regular visitors, many of whom are not considering going elsewhere. And that would be a good boost for Microsoft.”

He also noted that Yahoo Mail, Yahoo’s popular free email service, would combine well with Microsoft’s own Hotmail service to create a very large base of email users.

In 2008, Microsoft tried to acquire Yahoo. Yahoo’s argument that the bid was tool low prompted Microsoft to finally give up.

Since then, Yahoo has been dealing with some significant problems.

No longer the high-flying Internet pioneer of its heyday, Yahoo last month fired Carol Bartz, who had joined the company as CEO with high hopes that she could return the company to its past glory.

Once Bartz was out the door, industry analysts began speculating that Yahoo’s board might be open to a solid acquisition offer.

Read More…

Apple Blasted For Not Blocking Stolen Certificates

A security researcher blasted Apple for what he called “foot dragging” over the DigiNotar certificate fiasco, and urged the company to act fast to update Mac OS X to protect users.

“We’re looking at some very serious issues [about trust on the Web] and it doesn’t help matters when Apple is dragging its feet,” said Paul Henry, a security and forensics analyst with Arizona-based Lumension.

Unlike Microsoft, which updated Windows Tuesday to block all SSL (secure socket layer) certificates issued by DigiNotar, Apple has not updated Mac OS X to do the same.

DigiNotar, one of hundreds of firms authorized to issue digital certificates that authenticate a website’s identity, admitted on Aug. 30 that its servers were compromised weeks earlier. A report made public Monday said that hackers had acquired 531 certificates, including many used by the Dutch government, and that DigiNotar was unaware of the intrusion for weeks.

Because almost all the people who were routed to a site secured with one of the stolen certificates were from Iran, many experts suspect that the DigiNotar hack was sponsored or encouraged by the Iranian government, which could use them to spy on its citizens.

Microsoft isn’t the only software maker to block all DigiNotar certificates: Google, Mozilla and Opera have also issued new versions of their browsers — Chrome, Firefox and Opera — to completely, or in Opera’s case, partially prevent users from reaching websites secured with a DigiNotar certificate.

Users of Safari on Mac OS X, however, remain at risk to possible “man-in-the-middle” attacks based on the fraudulently obtained certificates.

Because Safari relies on the underlying operating system to tell it which certificates have been revoked or banned entirely, Apple must update Mac OS X. The Windows edition of Safari, which has a negligible share of the browser market, taps Windows’ certificate list: That version is safe to use once Microsoft’s Tuesday patch is applied.

Read More….

« Previous Page — Next Page »