MacNewsBlog

Security Update 2006-003 for Mac OS X 10.3.9 and Mac OS X 10.4.6 incorporates Security Update 2006-002 and addresses a bunch of additional vulnerabilities, including:

• AppKit
• ImageIO
• BOM
• CFNetwork
• ClamAV
• CoreFoundation
• CoreGraphics
• Finder
• FTPServer
• Flash Player
• ImageIO
• Keychain
• LaunchServices
• libcurl
• Mail
• MySQL Manager
• Preview
• QuickDraw
• QuickTime Streaming Server
• Ruby
• Safari

Quicktime 7.1 has some bug fixes and improvements as well as nine security patches!

FrontRow 1.2.2 addresses the following:

• Addresses bugs that prevented song shuffling within playlists


• Front row no longer says the server was not found when its waiting for a large movie trailer or long shared video to load


• Corrects bugs that prevented authorized Audible Audiobooks from playing


• Fixes a variety of DVD compatibility issues


• Purchased movies located in the Movies folder are now correctly recognized


• Includes a variety of fixes for VoiceOver accessibility


• Fixes a bug that prevented Front Row from reconnecting to shared video libraries after wake from sleep

I haven't updated yet but as a rule of thumb, I usually download these updates directly instead of relying on the Software Update download mechanism built into OSX. AND I always make a backup of my entire system using a utility like SuperDuper first just in case something in the update messes up. It pays to backup your stuff!

Apple has finally announced the MacBook today. Wait a minute... didn't they already do that a while ago you ask? No no, that was the MacBook Pro, today's announcement is all about the MacBook which is Apple's semi-replacement for the iBook. I say semi-replacement because the iBook is still available for sale at the Apple Online store. Before i get into a brief listing of specs on the new MacBook, I noticed that Apple got rid of the 12" Powerbook as well as the 17" Powerbook. The only PowerPC Macs left are the G5 tower and the iBook. Apple also quietly upped the specs of the MacBook Pro 15" from 1.8 GHZ to 2 GHZ and 2 GHZ model to 2.16 GHZ for the same price.

Let's cut to the chase: what are the main differences between a MacBook and a MacBook Pro 15"?

• Size: 13.3-inch (diagonal) glossy widescreen TFT vs. 15.4-inch (diagonal) widescreen TFT; glossy display option


• Resolution: 1280 x 800 pixels vs. 1440 x 900 pixels


• Graphics Card: Intel Graphics Media Accelerator 950 vs. ATI Mobility Radeon X1600 (PCI Express)
• 
  
• Video Memory: 64MB of DDR2 SDRAM shared with main memory (2) vs. 128MB GDDR3 SDRAM or 256MB GDDR3 SDRAM


• DVI: While the new MacBook 13" supports DVI, Mini-DVI to DVI adapter required - sold separately vs. Dual-link DVI built-into the 15" MacBook Pro


• External display usage: MacBook max display - 1920 x 1200 pixels vs. MacBook Pro 15" max display - 2560 x 1600 pixels. MacBook 13" cannot support 30in. Cinema Display!


• Video Mirroring Mode: MacBook 13" - Supported (built-in display plus an external display up to 1280 x 800 pixels) vs. MacBook Pro 15" Supported (built-in display plus an external display up to 1440 x 960 pixels)


• Extended Desktop Mode: MacBook 13" - Supported (built-in display plus an external display up to 1920 x 1200 pixels) vs. MacBook Pro 15" - Supported (built-in display plus an external display up to 2560 x 1600 pixels)


• No Express Card/34 slot on the MacBook 13"


• 5.2 lbs vs. 5.6 lbs


• No illuminated keyboard


• 6 hours of battery life compared to the MacBook Pro's 4.5 hours battery life


• Lower wattage 60W MagSafe Power Adapter


• Most importantly: IT COMES IN BLACK (the high end model anyway)

The news and updates don't stop today do they?

Apple just released the SMC Firmware Update for the MacBook Pro. Not exactly sure what it does but heres a link to some instructions.

I'll wait a while before installing this one.

What do you do with a brand spankin' new MacBook? Why take it apart and take a ton of pictures! At least thats what this website did. It seems that in these pics the thermal grease is missing? Or maybe it was properly applied.. and the Hard Drive is indeed easily removed. Check it out here.

Seems that Apple has decided to lock down its kernel to prevent pirates from hacking the Intel version of OSX. Read all more about this here.

While I don't do anything that low level, maybe you do. What's your take on this?

Last night we played with a MacBook over at the Apple Store and discovered something interesting: while placing two fingers on the track pad you are able to do a "right-click" by pressing the trackpad button. This is a user configurable feature that can be turned off and on. I quickly tried this on the MacBook Pro 15" but it didn't work and there was nothing to turn it on in System Preferences. Oddly enough, the Macbook Pro 17" was able to do this. Perhaps this is something just for the Apple's latest models for now? Hopefully a software update will bring this feature to the MacBook Pro 15" sometime soon. I haven't seen anyone talk about this "feature" at all!

"Apple’s Todd Benjamin, director of portables worldwide product marketing, took a few minutes out of his hectic schedule to speak with Macworld UK Wednesday."

Benjamin sings praises to the MacBook for its wonderful glossy screen, "We say glossy because when you look at the screens you’ll see a glossy appearance. It means colors are much richer; they look great" and even tells customers to use AppleCare if you have a problem.

Full story here. Via CIO.

Bear Stearns analyst Andy Neff sent a note to his clients after having a metting with Apple CFO Peter Oppenheimer and VP of Product Marketing for iPod Greg Joswiak.

Of note:

• they are optimistic about the outlook for a refresh of the iPod with a "True" Video iPod and other new products.


• Next gen iPod is coming to compete with other companies offerings


• Refresh will happen ahead of the Holiday season


• True video iPod will be a complimentary product to iPods


• An iPod Phone is in the works, although timing remains uncertain

Theres a lot more in this article over at SeekingAlpha.

GimpShop 2.2.11 was released as a Universal Binary today. This means that Intel Macs can take advatage of a fully native version of GimpShop. I haven't downloaded it yet as I'm on the road right now and my connection is kinda flakey but I will when i get home to a faster connection.

People compare this to an open source Photoshop but I'm sure there are people who would disagree with that statement. It's FREE so I'm not complaining! Free is GOOD!

You can download away from the website or a mirror.

If you're currently an Apple Care Customer and want the latest bootable version of Tech Tool Deluxe, Apple has made this easier than ever to do. Simply go to this page and enter the serial number of your Mac.

This doesn't seem to work yet for the Intel Macs but this is a treat for PowerPC Mac owners and people like me who fix Mac's all day long!

Just a few quick news items this morning:

• One of the first Express Cards ships today! 2-Port NitroAV FireWire800/1394b Professional Express Card (34mm) Interface Adapter (MacBookPro) is available here for $89.


• Apple announced Final Cut Express HD 3.5 today. Universal Binary priced at $99 for current owner or $299 new


• SuperDuper 2.1.1 is out and features disk duplication, creation of bootable copies, creation of restorable images compatible with ASR, Safety Clones, Smart Update, AppleScript support, and more. This release adds the ability to automatically mount and unmount backup volumes during scheduled operations, along with other improvements and bug fixes.


• Onyx 1.7 for Mac OSX 10.4 was updated today. Onyx is a great tool for maintenance and optimizing and its FREE! Donations accepted.


• Macintouch has some interesting Cinebench stats of their MacBook. Of note is the higher OpenGL Software score probably due to optimization of OSX 10.4.6


• From Digitimes: In line with the latest launch of Apple Computer’s Intel Core Duo-based MacBook, Asustek Computer has camped out its design team specializing in Apple products at the company’s manufacturing facilities in Suzhou in preparation for volume production, according to sources at Taiwan notebook makers.


• From Information Week: Apple Fixes Firmware, Leaves Users Confused - Although Apple said that the update was to System Management Control (SMC) firmware, it was up to MacBook Pro users to figure out that SMC is the specialized controller that manages thermal and power conditions, and is in charge of running the portable computer's fans.


• From News.com Blogs: It appears that one casualty of Apple Computer's move to Intel chips could be its open-source Darwin core. According to InfoWorld magazine (free registration required), Apple won't release code for the Intel version of Darwin, the open-source Unix core that forms the base layer for Mac OS X.

More a little later in the day!

Parallels released the RC (release candidate) of their Parallels Desktop software. I've been using Parallels during this beta period and will plunk down my $39 for this bad boy. In my opinion, this is better than BootCamp simply because I don't ever have to leave OSX.

What's new in Parallels Desktop for Mac RC?

• New look and feel


• Improved performance and stability


• Better and broader USB support


• Improved Shared Folder functionality


• Improved networking


• Better sound support


• Better fullscreen operation


• Resolved Suspend/Resume issues


• Uninstaller introduced


• National keyboards mapping issues have been fixed


• Red “Power Off” button now always acts like Power Off


• Blue “Pause” button now always acts like Suspend


• The “Pause” button was moved to the VM menu
  

Known issues:

• Some USB devices are still unstable


• FreeBSD 5.4 installation sometimes hangs

Check it out!

Parallels Desktop RC

They even have Shuffles, Nanos, Apple iPods with Video Capability, and if you miss the iPod mini... they've even got those @ $139!

Apple Certified Refurbished products are pre-owned Apple products that undergo Apple's stringent refurbishment process prior to being offered for sale. All Apple Certified Refurbished products are covered by Apple's One-Year Limited Warranty. You can also get Apple Care with any of these items. Fries with that sir?

Just a few things today:

• Ars Technica Reviews Apples new MacBook - turns out they love the MacBook Pro, but don't like the heat, glossy screen and non existant seperate graphics card. Read it here.
• Everyone's talking about Steve's Giant Glass Cube in NY. See some cool pics from this flickr gallery. And someone also got some cool pics of Steve Jobs visiting the new Apple Store location as well! Via TUAW. Have any of you visited the new store? Send us some deets and email us!
• Apple has filed a counter suit against Creative
• A few Scotish teachers are seaking a to put a ban on iPods and other gadgets at school.

More news as it happens!

Interesting observation on the InCrew.com forums! A user reported that taking the battery out of the MacBook Pro lowered the temperature of the unit. An InCrew moderator further commented that removing the memory cover lowers the temperature even more due to the wattage on the 667Mhz DIMMS used by the MacBooks . Interesting stuff.

Read more at this post: No battery = much lower temp?????.

The folks at InCrew have posted screen shots of their upcoming fix for MacBook Pro heat as well as the whinning issue. We'll most likely get our hands on this nifty preference panel sometime by Monday!
Until then rest your weary eyes on some eye candy and get put those hot palms in the air to cool them off. Have at it here.

Steve Jobs gets interviewed on CNBC on the debut of Apple's new store.
Jobs had some interesting things to say, and when asked about an iPhone he used the age old "Apple doesn't talk about unreleased products" line. Ah it was music to our ears.

So what're ya waiting for? Go check it out on YouTube.

Apparently so according to BareFeats.com which just tested a MacBook Pro 17" compared to a 15" version. During CPU intensive tasks the MacBook Pro 17" showed a difference of about 8-10% which is in line with the 8% higher clock.

The MacBook Pro 17" really showed it's teeth during intensive GPU tasks where it outperformed the 15" by up to 43%!

"We were puzzled but pleased with the results, but after receiving a tip from Michael Bean of AMUG, we rechecked the 17" MacBook Pro's X1600 GPU's core and memory speeds before, during and after running 3D Games using Graphiccelerator's "Show ATI Frequencies" function. Before starting a series of runs, the core measured 311MHz frequency. When we ran 3D games, it jumped to 423MHz. After sitting idle a few minutes, it fell back to 311MHz. We measured a similar jump in the GPU's memory clock from 297MHz to 450MHz. Now we know why the 17" MacBook Pro performed as well as the Intel iMac on the 3D Game tests."

Watch out Apple Forums... yer gonna get an earfull once 15" owners catch wind of this... Let the angry MBP 15" owners ranting and raving begin now! Check the story out for yourself at BareFeats.

Here we go again! The press has news of supposed potential vulnerabilities that don't exist out in the wild at all. Although chip-level attacks are rare, McAfee has claimed in a recent white paper that they are a potential problem now that Apple has moved to the Intel platform. Just in case you'd like to read up on this unlikely form of attack, i've included it here. It's a slow news morning so far.

Via Vnunet.com.

Just as I'm finishing up part 2 on installing Movable Type, Apple has released XCode 2.3 today. Theres a whole slew of changes that you can read about here.

This version is for PPC and Intel!

A forum posting on OSx86.com featured a workaround for getting 15" MacBook Pro models to right click while 2 fingers are on the trackpad just as the MacBook Pro 17" and MacBook Pro can do. This nifty hack can be had here. I haven't had a chance to install and use this yet so... use at your own risk or just read the thread for details!

No, this isn't about that Battlestar Galactica guy, but rather the first spawn of the now merged Adobe and Macromedia.

From PDFZone - "Let the countdown begin for Apollo, one of the first fruits of the Adobe-Macromedia merger. The technology will be integrated into Flash Player and Adobe Reader, and will give developers the tools to create run-time apps that can be used offline without a browser, yet with the lower costs associated with Web development tools that require browsers."

It will be interesting to see how this develops. All I want is native versions of Photoshop and Fireworks...

SecuObs.com is reporting on a vulnerability in Apple XCode versions prior to 2.3.

"The vulnerability is caused due to missing access restrictions on the WebObjects Xcode plug-in network service. This can be exploited to gain access to and modify WebObjects projects on the system via the network service without requiring authentication."

The solution is to update to XCode 2.3 located here.

Looks like Apple was unsuccessful in unmasking the information leak to Macintosh rumor website AppleInsider. Many journalist and bloggers are claiming this as a victory. Read more here.

Apple has launched a new section of their website dedicated to professionals that use the Macintosh. Showcasing pros in design, music, photography, motion graphics and interactive conent the website has tips, interviews and portfolios.

Welcome to Apple Pro.

Is the replacement for the venerable G5 to be an Intel Conroe chip? If Hexus.net has their way the answer is yes. Hexus is speculating that the replacement for the G5 will be Intel's next crop of Core 2 Duo (Conroe). They even go as far to speculate that Apple will upgrade their current fleet of Intel Macs with the faster Core 2 Duo Merom chip when it becomes available later in the year.

Like reading this kind of speculative lit? Hurry on down the road and check it out here.

Apple has released Superdrive firmware Update 2.0 which fixes burning speeds when writing to certain recordable DVD media. It requires MacOSX 10.3.9 or Panther 10.4.6 and seems to only fix Powerbook G4, iMac G5 and MacMini G4.

Get it here.

I've been using Parallels since it came out and it looks like it's just getting better and better. With this release Parallels Desktop has integrated another Parallels product: Parallels Compressor Server Edition technology which is said to improve performance and conserve physical hard disk space if you’re using Windows 2000, XP or 2003.

If you were smart and pre-ordered Parallels you'll be getting the whole package for that low price of $39.99 instead of $79.99.

Go get it here.

If you've got an Intel Mac and have been having problems with installing Adobe CS2 (and many have), then this next bit is for you. Adobe has posted a few tech notes on this subject so have at them!

• Installation freezes on Intel-based Macintosh with QuickTime 7.1.
• 
  Intel-based Macintosh computers freeze during startup after you install QuickTime 7.1.
• Computer hangs after printing to Adobe PDF Printer (Acrobat 7 on Intel-based Mac OS X with QuickTime 7.1 installed)
• Activation of Adobe Creative Suite 2 fails on Intel-based Macintosh computers with QuickTime 7.1.

According to allhiphop.com, rapper 50 Cent is Negotiating with Apple to get his own branded line of affordable computers aimed at inner-city residents. Although sparse on details it seems that his manager Chris Lighty is negotiating the deal.

Read the article at allhiphop.com.

We're back! We are still in the process of moving things around and getting our new internet connection installed so hang tight. I'll try to post things of interest and stuff that other news sites aren't covering. If you have anything you'd like to see covered feel free to contact me!

As strange as it seems, Apple has decided NOT to sell the Education iMac to individual qualified purchasers instead opting to sell directly to schools.

From Macintouch:
Apple made a switch in its iMac for Education program, such that individuals can no longer buy the lower-priced model:

[Joe Chellman] My mom is a teacher, and her pink iMac just started crapping out after many years of service. I looked at the Apple store last night, saw the new 17" education iMac for $899, and thought it would be a good option.
Today I went back, and it was gone. According to the guy I spoke with on the phone at Apple, they have decided only to sell it to schools, not to individual educators. It's a shame, and I thought I'd pass the info along.

[Apple ID needed to download Open Source]
Apple has released the Tiger Darwin Kernel today.

Also open today is Mac OS Forge, a resource to working with source code to "popular Apple-original projects".

"Mac OS Forge is dedicated to supporting the developer community surrounding open source components specific to Mac OS X. Here you will find resources for working with the source code to popular Apple-original projects, as well as third party projects that are closely related to the Macintosh operating system."

Currently available projects include:
Bonjour
Collaboration
Kernel (xnu)
Launchd
WebKit

All this after rumors that Apple wouldn't release Tiger Darwin code as well as the closing of OpenDarwin.org.

This is great news!

Parallels have sent out a beta update to their popular Parallels Desktop application which allows Mac owners to run Windows or just about any other compatible x86 OS.

Some of the fixes include a more USB compatibility with Windows mobile and web cameras as well as optimized Hard Drive cache.

There are a ton of fixes and additions so you should head over to their website to check it out. Get the update here.

Since I've ordered a new MacPro, I was wondering how the heck I was going to get OSX Server running on it. Well it turns out that Apple quietly released OSX Server as a Universal Binary version sometime in June or July I would guess.

While doing a little Google search I turned up this page from Apple for Working with Intel based Macs. The entire page is of interest if you're a system admin, but what I found the most interesting was the first item called Using Mac OS X Server 10.4 with Intel-based Mac OS X systems which is actually a tech article.

What the tech article doesn't answer is if there is some sort of upgrade for those of us who already own a copy of OSX Server 10.4 for PPC. I am assuming that one would have to re-purchase a new copy to get the universal binary version but I could be wrong. If anyone has information on this please let us know!

I can't wait to get my MacPro and try out the UB version of OSX Server!

Apple released BootCamp 1.1 beta today featuring a slew of new features and bug fixes. This version should allow you to run on the new Mac Pro's as the users found the older BootCamp beta would often cause problems.

Boot Camp 1.1 beta includes:

• Support for the latest Intel-based Macintosh computers
• Easier partitioning using presets for popular sizes
• Ability to install Windows XP on any internal disk
• iSight camera support
• Support for built-in microphones
• Right-click when pressing the right-hand Apple key on Apple keyboards
• Improved Apple keyboard support including Delete, PrintScreen, NumLock, and ScrollLock keys

Get BootCamp beta 1.1 here.

Apple has released a new beta of their beloved BootCamp software for all of you who just have to have Windows on your Mac.

From Apple's website:

Boot Camp 1.1.2 beta contains several updates and is intended for all new and previous Boot Camp beta users.

Boot Camp 1.1.2 beta includes:

If you have a Core2Duo MacBook (lucky you) or are thinking about getting one but want more info on them, well you're in luck.

Apple just released the developers notes for these babies.

Have at it:
MacBook 15 inch Core2Duo Developer Notes

MacBook 17 inch Core2Duo Developer Notes

For those of you waiting for those new 2nd Gen iPod Shuffles, you're in luck. They should be in stores by Friday and if you've pre-ordered one, you'll be getting it even sooner!

The new shuffle is so small that it makes me wonder if people will start losing them left and right. I will miss one feature that that the old shuffle had: the ability to easily use it as a flash drive.

Theres a problem with my favorite backup utility, SuperDuper and Intel Macs running 10.4.8.

According to this thread on the ShirtPocket forums SuperDuper will crash due to a bug in 10.4.8 on Intel:

"The problem seems to be with threaded access to window updates; our progress indicator is set to update on its own thread, and the "main thread" updates too. But Core Graphics -- which handles the low level updating -- looks to be having a new problem with locking, and crashes either the main thread or the progress indicator thread when there's contention..."

Well whatadya know? Apple today released iTunes 7.0.2 to compliment the fact that the new shuffle is due to arrive any hour now.

In addition to compatibility with the 2nd gen Shuffle, they also claim to have squashed some bugs with this new version. Download it and try it out!

Apple has issued a Repair Extension Program for power supply issues in G5's.

From the webpage:
The affected Power Mac G5 models were sold between approximately October 2005 and August 2006 and feature Dual 2GHz, Dual 2.3GHz or Quad 2.5GHz PowerPC G5 processors.

If Apple or an Apple Authorized Service Provider (AASP) determines that your Power Mac G5 computer is eligible as part of the program, the power supply repair will be covered by Apple for up to two years from the original date of purchase even if your Power Mac G5 is out of warranty. This worldwide Apple program does not extend the standard warranty coverage of the Power Mac G5.

Affected systems will exhibit one of the following power-related symptoms:
* System will not start up after the power button is pressed
* No LED activity

Go to the Apples webpage and see if your machine falls into the specified serial number range.

Hey all! I just completed a MacHeist and have 5 invitiations to give away. For those of you who don't know what MacHeist is, It's the brain child of Phill Ryu, the guy that brought us MyDreamApp. Basically this invitation only website will offer you free software or discounts for doing a "MacHeist". Think of it as kind of an online Mission Impossible.

Today Apple released a whole bunch of EFI Firmware Updates for Intel Macs. See them all here.

This EFI Firmware Update fixes several Boot Camp, start up, and wake-from-sleep issues on all Intel Macs.

MacBook Pro EFI Firmware Update 1.2
After the firmware update is successfully applied to your computer, your Boot ROM Version will be:
MBP11.0055.B08 (MacBook Pro 15 inch)
MBP12.0061.B03 (MacBook Pro 17 inch)

iMac EFI Firmware Update 1.1
After the firmware update is successfully applied to your computer, your Boot ROM Version will be:
IM41.0055.B08 (early 2006)
IM42.0071.B03 (17-inch mid 2006)
IM52.0090.B03 (17-inch late 2006 CD)
IM51.0090.B03 (20-inch late 2006)
IM61.0093.B01 (24-inch)

DigiTimes reported today that they have sources that say a AMD-based Apple notebook is in the works.

I'm not sure how much I believe this as Apple's alliance with Intel is just over a year old and I'm sure they have a pretty good working relationship. Partnering with AMD would be like partnering with the "enemy" so to speak.

Anyway, I've been proven wrong before... I'll believe it when I see it.

Read more: Sources in passive component industry say AMD-based Apple notebook in the works

Hmm seems like Apple's Online store is down for some updates...

I wonder what's coming? Maybe nothing at all....

Theres been tons of buzz about the supposed iPhone. Today there was a report on out there about Apple working on ANOTHER iPhone with an emphasis on iChat. Hmm. A 2nd phone? The first one hasn't even come out yet! I wonder why iChat wouldn't be incorporated into the first iPhone?

In other news, I saw Apple's stock hit an all time high of 87 today. AAPL is currently trading at 86.38 with a couple of hours left in trading.

Apple's stock (AAPL) currently trading at 87.93 hit it's all time high today of 88 on speculation of the iPhone as we reported yesterday. If you don't have Apple stock, it might be something to consider if it pulls back a bit since we all know for sure that 10.5 is coming soon along with iTV and most likely a "true" video iPod and an iPhone. I can only see Apple's stock going higher.

Washington Post's Brian Krebs wrote today about a vulnerability in Mac OSX 10.4.8 concerning the way the OS works with files with a .DMG suffix which is a common file format used to install software.

When a user opens a .DMG file that has the malware loaded in it, the system can be exploited causing a kernel panic.

Read more about it here:

Exploit Released for Unpatched Mac OS X Bug

So What can we do?

Apple just released a whole bunch of security patches and what not!

Read about it: http://docs.info.apple.com/article.html?artnum=304829

From that page heres the skinny on what's patched. I'll have to do a full backup of my server before doing any of these since I custom configured a lot of things. Good job Apple!

AirPort
CVE-ID: CVE-2006-5710
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.8, Mac OS X Server v10.4.8

Impact: Attackers on the wireless network may cause arbitrary code execution

Description: A heap buffer overflow exists in the AirPort wireless driver's handling of probe response frames. An attacker in local proximity may be able to trigger the overflow by sending maliciously-crafted information elements in probe responses. This issue affects eMac, iBook, iMac, PowerBook G3, PowerBook G4, and Power Mac G4 systems equipped with an original AirPort card. This issue does not affect systems with the AirPort Extreme card. This update addresses the issue by performing additional validation of probe response frames. Credit to H D Moore of Metasploit for reporting this issue.

ATS
CVE-ID: CVE-2006-4396
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.8, Mac OS X Server v10.4.8

Impact: Local users may be able overwrite or create files with system privileges

Description: The Apple Type Services server insecurely creates error log files. As a result, a malicious local user may be able to overwrite or create files with system privileges. This update addresses the issue by creating error logs securely.

ATS
CVE-ID: CVE-2006-4398
Available for: Mac OS X v10.4.8, Mac OS X Server v10.4.8

Impact: Local users may be able to run arbitrary code with raised privileges

Description: Multiple buffer overflows were discovered in Apple Type Services server. By sending a maliciously-crafted service request, a local user may trigger these overflows. This may lead to a crash or arbitrary code execution with system privileges. This update addresses the issue by performing additional validation on service requests. This issue does not affect systems prior to Mac OS X v10.4.

Alsoft finally released their Universal Binary version of the disk utility Disk Warrior 4. The defacto standard in repair tools, Disk Warrior will finally be able to be used on Intel Macs.

You can get a downloadable version for $99.95 or an upgrade for $49.95 in which Alsoft will send you a physical disc.

Thank God it's here at last. I haven't had many problems with Intel Macs yet but this will be the handy to have when I do!

Rumors of a delay in Apple's yet-unannounced iPhone pushed their shares down almost 2 points to 88.11. Since Apple hasn't even announced an iPhone, I'm not sure where these guys are getting their info...

Read more:
The Street

Market Watch

If you've got a core 2 duo MacBook Pro or MacBook, this is for you. Apple doesn't list what this fixes but just says it improves AirPort compatibility. So if you've been having problems with your swanky new MacBook or MacBook Pro and Airport, try this out!

Download here.

Shares of Apple stock fell almost 5% today ever since a report from legal publication, The Recorder, a San Francisco-based publication owned by American Lawyer Media, reported that federal prosecutors are probing whether former company executives forged documents to maximize executives' stock option profits.

Steve Jobs is said to have hired his own outside attorney. This could be something or absolutely nothing. We'll see in the days ahead. It's unfortunate that this kind of thing can put a damper on holiday spirits!

Read more:
http://biz.yahoo.com/ap/061227/apple_computer_mover.html?.v=2

Today Apple's iTunes Store added Classic Star Trek Season 1 to the list of available TV shows. I'm sure they'll be adding the rest as things progress. This is great news for all Star Trek fans!

MacDailyNews has this report from Goldman Sachs:

"Across the Mac line, Apple seems to have had an exceptional Thanksgiving weekend. Fourth-quarter demand for MacBook and MacBook Pro [notebooks] are running better than Apple's already aggressive targets. We expect 1.1 million notebooks and 1.8 million total Macs in the December quarter," Goldman Sachs reports. "Our retail checks point to strong Apple store results both on the Mac and the iPod side. Combined with a higher mix of Macs, higher retail sales should drive upside to our 28.6% gross margin forecast and Apple's 28.25% target. Based on strong demand, at least one key supplier is allocating even more capacity to Apple and taking it away from other areas."

They also expect to see a new Video iPod with larger screen that isn't considered a product refresh for the upcoming MacWorld.

Here are some sites to see the live Keynote coverage of Steve Jobs Keynote at MacWorld:

All photos from MacRumors.com. Please go check the rest out over there!

Supports 802.11n!

From the apple store:
AirPort Extreme Base Station

The sleek, easy-to-use AirPort Extreme Base Station is the perfect wireless access point for home, school, or small business. Blazing fast, it delivers up to five times the performance and up to twice the range compared to 802.11g routers.1 And you can use it with both Macs and PCs.
Price: $179.00

Estimated Ship:
February
Free Shipping

Here: http://events.apple.com.edgesuite.net/j47d52oo/event/

Apple earnings rose 78% due to strong holiday sales of iPods and Macs. Today Apple released their Q1 financials and in it they revealed that it earned $1 billion, or $1.14 per share, compared to $565 million, or 65 cents a share a year ago.

Apple also reportedly shipped 21 million iPods and 1.6 million Macs during that same period.

Not even record earnings could stop investors from taking profits today for Apple stock. The stock was down 4.34% trading at 90.85. The low for the day had been 89.37. The sell off was based on Apples conservative outlook for the next quarter and perhaps the fact that the conference call with Apple's Peter Openheimer didn't include any info on the new products like AppleTV and the iPhone.

TheStreet.com had this from analysts this morning:

"UBS analyst Benjamin Reitzes added a penny to his EPS estimate, to 61 cents for the second quarter. For fiscal year 2007, he raised his EPS forecast to $3.20 from $2.87 and moved his target price to $124 from $118. Reitzes has a long common stock position in Apple, and his firm has provided nonsecurities services to Apple."

Read more from thestreet.com.

MacNN has some great excerpts from the Apple Q1 conference call the other day. It highlights Mac Sales, iPod Sales, Leopard, Cisco lawsuit, iTV, Parallels and the Japan marketplace.

Read more here: MacNN - Conference Call