Apple Jan. 27 launch event... what will it be?

[Uncle Ted]

But Mac had Typography so that has to count for at least 2. Pretty sure the Security one is not true. Also the typo in this "graphic" made it very difficult for me to even continue reading it

How sure?

Pwn2Own 2012 has concluded with Chrome, Internet Explorer, and Firefox all being compromised. Apple’s Safari was the only browser to be left standing in the competition that annually takes place at the CanSecWest Applied Security Conference and is sponsored by HP’s TippingPoint Zero Day Initiative.

http://pwn2own.zerodayinitiative.com/status.html

Google Chrome: Full sandbox escape and code execution
Microsoft Internet Explorer: Protective Mode Bypass and code execution

[...]

Mozilla Firefox: Full code execution

[BigPiney]

How sure?


http://pwn2own.zerodayinitiative.com/status.html

Oh sorry, I didn't know it was only talking about browsers.

Cause it wasn't talking about this then.

[Jeff Lebowski]

Oh sorry, I didn't know it was only talking about browsers.

Cause it wasn't talking about this then.

This week, security researchers discovered that a new computer virus had infected half a million Macs — about half of them in the United States. The virus is infesting the computers in the most surreptitious way possible: users need not manually click on any malicious links or manually download any malware to get infected. The program simply downloads itself. Once downloaded, the malware’s creators gain a back door that gives them unauthorized access to the victim’s computer.

[Uncle Ted]

Oh sorry, I didn't know it was only talking about browsers.

I wasn't only talking about browsers either. It turns out that the browsers is a very complicated application and practically impossible to fully secure. In short, browsers are about the biggest target for attacks. Therefore, applications such as safari rely on a lot of operating system features to mitigate malware.

Cause it wasn't talking about this then.

The fakeflash malware acted like an adobe flash installer (for the browser). It did required the user to click on the install button and provide their password to install. The article is misleading about this.

Apple (and others you might know have) added a new security feature in Mtn Lion (aka. Cougar) and as an update to Lion that will block this attack called Gatekeeper. Gatekeeper is available but not "on" by default in Lion and "on" by default in Mtn Lion. In a nut shell, Gatekeeper will not allow apps to run that are not signed with an apple signed certificate. Apple can also revoke certificates of applications/developers that contain known malware or come from an untrusted source. Note that all apps sold in the Mac App Store have to be, individually reviewed, signed and run in an app sandbox which makes the Mac App Store a good source for trusted (or known to be safe) apps. Also, the Adobe flash install is now signed. In addition, it is possible to create whitelists and blacklists of signatures that will or will not be allowed to run although the GUI doesn't support that currently.

[Moliere]

I just got an email from Apple about their new OS (Mountain Lion Cougar). I've always updated OS before, but this one doesn't really seem to be worth it. It seems all the features it has will just turn my iMac into an iPhone where I can message people. Are there any other reasons for me to upgrade?

[Uncle Ted]

I just got an email from Apple about their new OS (Mountain Lion Cougar). I've always updated OS before, but this one doesn't really seem to be worth it. It seems all the features it has will just turn my iMac into an iPhone where I can message people. Are there any other reasons for me to upgrade?

Yes, it has lots cool pictures of cougars.

Other reasons, IMO:

- Better security including the new Gatekeeper feature (Checks to see if your downloaded apps come from a trusted source proving that it really comes from Adobe, for example, using signatures). There are some other new security features worth mentioning as well such as Kernel ASLR (makes it significantly harder for malware to "pwn" your system), and more sandboxed apps (security harden apps). The new security features is worth the $20 to upgrade by itself IMHO.

- iMessage. I have been using this feature a lot to "text" people with iPhones. People think I am a super fast text message typer on my iPhone.

- Notification Center. This is like grawl but better.

- Power Nap. My laptop now backs itself up in its sleep. No more worries about keeping it awake to do this.

- Voice Dictation. Seems to work ok.

- AirPlay Mirroring. Now your mac screen can be mirrored to your AppleTV.

- Twitter integration. I don't use a lot of twitter but folks that do tell me this is cool. There are some new facebook features as well.

[Tim]

Ted, my one issue with Gatekeeper is that it doesn't provide any hints to the user on how to actually change their Gatekeeper settings. It gives the error message indicating that your system can't run the unsigned app, but it doesn't give say anything about how to change that setting if you don't want it. I can imagine a lot of people being frustrated when they see that error -- a link to the Gatekeeper settings at that moment would make the experience perfect.

[Uncle Ted]

Ted, my one issue with Gatekeeper is that it doesn't provide any hints to the user on how to actually change their Gatekeeper settings. It gives the error message indicating that your system can't run the unsigned app, but it doesn't give say anything about how to change that setting if you don't want it. I can imagine a lot of people being frustrated when they see that error -- a link to the Gatekeeper settings at that moment would make the experience perfect.

Yes, I agree that the System Preferences UI for gatekeeper leaves a lot to be desired. I would suggest that you file a bug report:

http://bugreport.apple.com/

Also, FYI, there is a powerful command-line UI to gatekeeper for changing to the security policy: see 'man spctl'

[Coach McGuirk]

So September 12th is the date floating for iPhone 5 release and mini iPad. Would be nice, I'm ready for a new phone.

[thesaint258]

So September 12th is the date floating for iPhone 5 release and mini iPad. Would be nice, I'm ready for a new phone.

The 12th is the announcement date. It's expected to be released on the 21st.

[Coach McGuirk]

lets get it started,

[Coach McGuirk]

To DDD's point

iPad accounts for 91% of traffic from tablets. "I don't know what these other tablets are doing. They must be in warehouses or store shelves or maybe in people's bottom drawer."

[Coach McGuirk]

7.6 mm thick, 18% thinner than before. 20% lighter than the 4S.

[Art Vandelay]

Coach, just let me know when I can call my Premier Business Account representative (sounds more impressive than it is- my work pays for my phone. ) to order my new iPhone. My iPhone 4 has been on it's last legs for a couple months. I've been anxiously awaiting the new release.

[Coach McGuirk]