Apple patches dire bug

Fruity cargo cult Apple has no problem with viruses, it just pretends it does not have them and quietly pushes a fix to its users usually months afterwards.

This time though Apple has made the unusual step of issuing a fix for a security flaw within days and telling people.

Part of the problem is that the flaw was a big one and that it allows hackers to intercept data such as email.

The security update for users of Apple's OS X computer operating software follows a fix issued for iPhones last week, meaning all Apple device users now have access to the patch.

However, security analysts are wondering how the flaw could be in Apple software in the first place. The flaw was in the way iOS handles sessions, in what are known as secure sockets layer (SSL) or transport layer security. The flaw is such a basic software howler that it is a wonder it was not spotted.

Researchers have said the bug could have been present for months. Some have suggested that the flaw might have been an intentional backdoor that Apple was operating in agreement with the NSA. Jobs’ Mob has to be seen to shut it down, or else ordinary hackers might use it.

The bug let attackers with access to a mobile user's network, such as a shared unsecured wireless service offered by a cafe, to see or alter exchanges between the user and protected sites such as Google Gmail or Facebook.

by Edward Berridge via TechEye - Latest Software headlines

Hackers go for speech recognition in Chrome

Hackers have worked out a way to use the speech recognition in Chrome to spy on you.

Apparently, the method involves switching on your microphone using bugs in the Chrome browser.

The exploit was discovered by developer Tal Ater who found it while working on annyang, a popular JavaScript Speech Recognition library.

This allowed him to find multiple bugs in Chrome, and to come up with an exploit which combines all.

He reported the exploit to Google's security team in private on September 13. By September 19, their engineers have identified the bugs and suggested fixes. On September 24, a patch which fixes the exploit was ready, and three days later, his find was nominated for Chromium's Reward Panel.

But as time passed, and the fix didn't make it to users' desktops. A month and a half later, Ater asked the team why the fix was not released. Their answer was that there was an ongoing discussion within the Standards group, to agree on the correct behaviour - "Nothing is decided yet."

Four months later Google is still waiting for the Standards group to agree on the best course of action, and your browser is still vulnerable.

As it lies, all it takes is a user to visit a site that uses speech recognition to offer some cool new functionality.

Here is a short film of the exploit in action

by Edward Berridge via TechEye - Latest Software headlines

Winamp and Shoutcast get new life

After nearly dying a terrible death, Winamp software is now officially with a new owner.

Digital radio business Radionomy bought the media player and radio platform from AOL. The cash and share deal is supposed to be about $5 million to $10 million, depending on who you talk to.AOL taking a 12 percent stake of Radionomy in the process.

This is much lower than the $80 million AOL paid for Nullsoft, owner of Winamp and Shoutcast, in 1999.

AOL originally intended to shut them both down by December 20, 2013 so it is a good result in some ways. There were rumours of different buyers including Microsoft, which never went through.

Both Winamp and Shoutcast will continue as going concerns. Adding Shoutcast to Radionomy’s existing assets will make the company one of the biggest players in the radio streaming business, hosting some 60,000 radio stations, or roughly half the online radio stations on the market today.

Radionomy intends to offer Winamp’s media player just as it is today — with access to those 60,000 stations, but also playback ability for 60 audio and video formats; 6,000 add-ons like skins and plug-ins; and availability in 16 languages.

There is also some talk about revamping the aging software, which is getting on a bit. AOL did not do much to it and indeed some people saw that as an indication that the software was doomed.

by A staff writer via TechEye - Latest Software headlines

Man from Limerick calls for craicdown on open source browsers

A Fine Gael politician from Limerick, a mister called Patrick O' Donovan, wants a craicdown on open saucy internet browsers which can be tweaked to allow anonymous browsing.

Deputy O’Donovan has written to the Oireachtas Communications Committee, of which he is a member, asking it to investigate tougher controls on the use of open source internet browsers which allow users to remain anonymous in the illegal trade of drugs, weapons and pornography.

He claimed that there was an online black market which protects the users’ anonymity and operates across borders with open source internet browers and payments systems which allow users to remain anonymous.

This operates as an online supermarket for illegal goods such as drugs, weapons and pornography, where it is extremely difficult to trace the identity of the buyers.

If his committee does not take him seriously then he will raise the matter in the Dáil with both the Ministers for Justice and Communications. He wants to see if he can get the EU on his side.

O’Donovan claimed that coppers in the United States have recently taken action to address this problem, however it appears the solution was temporary, as replacement browsers quickly appeared to ensure the continuance of the illegal trades.

Of course, the fact that the Americans with their super surveillance gear could not get it working, should not put off the Irish. After all, it must be possible to stop people downloading a file off the interwebs if the government tells you that you cannot.

He thinks that enhanced international co-operation and engagement will tackle the problem. Bless.

by Nick Farrell via TechEye - Latest Software headlines

Steve Ballmer owns the mods

The shy and soon to be retiring Microsoft CEO Steve Ballmer has started a Brighton riot over the word "mod".

Ballmer, who describes himself as a "bit of a rocker" apparently, wants to re-open the long dead 1964 war with the "mods" by claiming he owns the rights to the word. If any Vesta driving fur-collared anoraks describe themselves as a mod he is threatening to sue them.

Mary Jo Foley on ZDNet found an odd trademark from Vole for the word Mod. She thinks that Vole wants to use the word as a replacement for 'Metro',

In August 2012, just before launching Windows 8, Microsoft officials admitted that the name Metro to describe the tiled interface and design language at the heart of its Windows Phone and Windows operating systems would have to go. One of the problems is a naming dispute with the German partner Metro Group.

Since then the Voles have been scratching their furry heads trying to come up with a better name. Some teams have favoured "immersive," while others have used "Windows Store" or "Windows 8".

Then on December 28, Microsoft applied for trademarks for "Windows Mod," "Office Mod" and "Microsoft Office Mod" which means that Mod will be the new Metro.

It could be something else. It could just be simply Steve Ballmer having a touch of the Quadrophenias and trying to wipe the mods from the face of the planet. Certainly if he attaches the name to Windows 8 he will do more damage to the movement than a baseball bat wielding "Mick the Wild One".

by Nick Farrell via TechEye - Latest Software headlines

Apple orders developers to use iOS7

The fruit themed purveyor of over-priced toys to rich Americans known as Apple has ordered developers to use its latest operating system or be purged from the istore.

Apple is now forcing developers to adopt iOS 7′s visual UI for their apps. The company has advised iOS developers that all apps submitted after February 1, 2014 must be optimised for iOS 7 and built using Xcode 5.

Apple believes that this will stop the fragmentation of products, something which plagues Microsoft and Google which have shedloads of customers using old operating systems.

The downside of course is that it means that people who do not want to upgrade, or who have machines which are too old to run it are unable to buy apps from the iStore. The spin off is that people will have to update their toys or they will not run new software.

The Tame Apple Press is presenting the change as proof of the superiority of the iOS7 which apparently was a drastic overhaul.

For example Gottabemobile said that treating customers and developers this way is "unsurprising given the push that Apple has given iOS 7 to ensure that it runs on any iOS devices–iPhone, iPad, and iPod touch".

Apple claims that it is all to allow the entire experience on an iOS device will feel more "unified and consistent". But while it seems that the Tame Apple Press gives Jobs' Mob a get out of jail free card for forcing upgrades on users who may not want them, if Microsoft told all its developers they were no longer allowed to write code for Windows 7 and must only write software that runs on the Windows 8 interface they would rightly scream "foul".

by Nick Farrell via TechEye - Latest Software headlines

Politicians, celebrities increasingly gaming search results

Politicians and celebrities are increasingly turning to reputation management companies to push out unwanted search results that reflect on them in a negative way.



A reputation management company has reported a 70 percent surge in British politicians, businesses, and pop stars who are secretly using its services to push out unwanted "damaging" information.



Over 90 percent of web users go straight to search engines when looking for information. As such, for people or businesses that depend on reputation, it's awkward for them when unwanted details are near the top of search results - whether they are true or not.



The claim, from reputation management company Veribo, says its work covers "global household names", including international businesses and "public figures and executives for whom protecting their online reputations is worth millions of pounds".



Veribo's CEO, Roei Deutsch, is Israeli Minister of Finance Yair Lapid's top new media advisor, and has cultivated a Facebook following for the politician.



A spokesperson for Veribo told TechEye, in brief, what the company does.



"In short, Veribo uploads and promotes relevant content and websites while pushing down unwanted search results," the spokesperson said. The company does this "by creating content and websites that will overcome existing results and blend in naturally in the individual's search results page.



"Veribo push down unwanted search results by pushing up positive or neutral ones," the spokesperson said. "They create relevant content and use their special tools to promote and optimise it along with the existing content that the individual is happy to showcase".

The spokesperson said the company mainly works on search engines to alter the visibility of search, rather than affecting actual content.

by A staff writer via TechEye - Latest Software headlines

Facebook rumoured to be working on 'VIP app'

Data harvesting procrastination machine, Facebook, is rumoured to be working on a snooty app that would provide extended access to celebrities.



Rather than being a snooty network exclusively for celebrities, it's going to be a way to manage content and engage with followers. According to AllThingsD , some sources suggest a small group of famous people are currently testing a 'VIP app' which will let them easily monitor fan discussion from mobiles and allow quick access to responding.



Facebook is reportedly trying to pull celebrities away from the Twittersphere and onto its network. This rumoured app will let 'slebs dive into conversation about them or the things they say. Its purpose seems to be to interact with followers and generate more interest.



Twitter is populated by celebraties with millions of followers who hang on their every tweet, and Facebook wants to get in on that action.

A Facebook spokesperson said the company is "currently testing some mobile features designed to help public figures interact with their fans," but details were scarce.

Celebrities are apparently even being briefed on 'best practices' for Facebook interaction, including sharing candid thoughts with followers.

Whether Facebook will achieve this remains to be seen, but it certainly seems like the rumoured app could be well applied to corporate pages.

by A staff writer via TechEye - Latest Software headlines