sl4shd0rk writes "At a Black Hat security conference in Las Vegas, researchers presented exploits on Apple's DHX authentication scheme which can compromise all connected Macs on the LAN within minutes. 'If we go into an enterprise with a Mac and run this tool we will have dozens or hundreds of passwords in minutes,' Stamos said. Macs are fine as long as you run them as little islands, but once you hook them up to each other, they become much less secure."

An anonymous reader writes "Last week, as the result of a straw poll on Facebook, Village Instruments agreed to begin development of an external Thunderbolt-connected graphics card enclosure. Village Instruments already has experience with its ExpressCard-connected ViDock graphics card chassis, which provides extra GPU juice for Windows and Mac laptops, and the Thunderbolt version is expected to be the same kind of thing — but faster. The only problem is, Thunderbolt is only 4x PCIe 2.0, so you won't be using this to connect modern, desktop-class GPUs to your laptop — and more importantly you need to carry around a second monitor to actually use a ViDock. So why not just buy a proper gaming laptop?"

adeelarshad82 writes "The patent system is certainly complex, especially when it comes to smartphones. The Financial Times estimates that as many as 250,000 patents are at stake in a smartphone. Industry titans like Microsoft, Nokia, and Apple have tens of thousands of patents each, but Google's portfolio is reportedly on the low end — 'under 1,000.' Taking advantage of the opportunity, Apple has its patent strategy aimed squarely at the number one rival to its iOS mobile operating system, Android, which is now embedded in 40 percent of all U.S. smartphones compared to Apple's 26.6 percent. Apple's lawyers have been aggressively suing Android manufacturers HTC and Samsung for various technologies, from the 'look and feel' to how it connects to broadband networks. A recently published article takes a deep dive into the lawsuits' possible outcomes and their effect on end users."

mask.of.sanity writes "An Aussie network engineer has published a guide to building a serial cable connector that allows access to a secret kernel debugger hidden within Apple iOS. The debugger was a dormant iOS feature carried over from Apple OS, and seems to serves no function other than to allow hackers to build better exploits. The cable needs an external power source and a jailbroken device to access the debugger." We've mentioned Pollock's serial adapter kit before, modulo the kernel debugging abilities.

oxide7 writes with this selection from IBT: "Hewlett Packard reduced the price of its TouchPad tablet computer again, highlighting the uphill battle manufacturers will need to overcome as they go head-to-head against the dominant Apple iPad line of tablets. Much of a tablet's success is based on the ecosystem of apps that is available to the end-user. HP is far behind Apple or even the No.2 tablet platform, Google's Android."

itwbennett writes "Macs aren't being hit with advanced persistent threat (APT) attacks, but that doesn't mean they're invulnerable, say researchers at iSec Partners. Speaking at the Black Hat conference in Las Vegas Wednesday, iSec founder Alex Stamos and his team of researchers took a look at the typical stages of an APT attack — and compared how the Mac would do versus Windows 7. Their conclusion: Macs provide good protection against the initial phases of the attack, but once the bad guys are on the network, it's a whole different story. 'They're pretty good for [protecting from] remote exploitation,' Stamos said. '[But] once you install OS X server you're toast.'"

TeaCurran writes with this mildly ranty objection to the most recent Mac OS X update; several friends who have made the leap on their MacBook Pros have various other complaints, too, including system slowdowns that resemble crashes (except that their pointers still work) and recurring black screens for some configurations (with or without the kernel panics TeaCurran mentions) — what's been your experience? "Apple OS X Lion shipped with new NVidia video drivers that are causing anyone with a mid 2010 Macbook Pro to get a kernel panic every 5-10 minutes. Apple knew about the issue before shipping lion, hasn't responded to the issue, and is censoring posts in their support forum that mention words like 'boycott' and 'petition.' NVidia has responded that the drivers are the responsibility of Apple so they won't deal with the issue. How a major hardware manufacturer can ship such a faulty product without getting much press about it is completely beyond me."

Hugh Pickens writes "Bloomberg reports that Google has accused Microsoft, Apple, and Oracle of waging a 'hostile, organized campaign' against Android by purchasing patents to keep them out of Google's hands and to make it more expensive for handset makers to use Android. 'We thought it was important to speak out and make it clear that we're determined to preserve Android as a competitive choice for consumers, by stopping those who are trying to strangle it,' writes David Drummond, Google's chief legal officer. Android's success has resulted in a 'hostile, organized campaign against Android by Microsoft, Oracle, Apple and other companies, waged through bogus patents.'" Microsoft has responded, saying they offered to bid jointly with Google on the Nortel patents, but Google refused. Some think Google is being hypocritical with their stance on patents changing now that Android appears to infringe on a bunch.

gumbi west writes "One Wall Street analyst predicts what slashdot commenters have predicted for years, that iOS and OS X will merge into a single OS. However the analyst sees this happening because the iOS devices receive a substantial CPU boost from the quad core A6 which can power MBA and smaller devices while following 64-bit ARM processors can bring the remainder of the Apple lineup back to ARM under a single architecture."

sfcrazy also noticed that Apple has officially removed MySQL from Lion Server, opting instead to include PostgreSQL, albeit in command line only form. The article speculates that the change is because MySQL is now Oracle property, and Apple is concerned about IP issues following all the legal issues surrounding Java.

lukehopewell1 writes "Apple has obtained an injunction from an Australian court effectively blocking the sale of the new Android Honeycomb-powered Samsung Galaxy Tab 10.1v. Apple Australia claims that the unit infringes on 10 of the Cupertino, California-based company's patents including the slide to unlock functionality as well as the edge-bounce feature. Samsung will provide Apple Australia with three units for study in coming weeks to ascertain whether or not the Korean gadget maker did in fact infringe on Apple's patented intellectual property."

DeviceGuru writes "DeviceGuru's 10-inch tablet smackdown pits Samsung's Galaxy Tab 10.1 against Apple's iPad 2. At price parity the iPad 2 is probably a better bet for the average user since it's a more stable, near-perfect device with a rich assortment of apps for nearly every possible function you'd like to perform on a tablet, reasons the post. However, with the Samsung tablet's cost of goods rumored to be around $215 versus $260 for the iPad 2 for comparable models, Samsung could drop its 10-inch tablet's price to $425 and pose a serious challenge to Apple's device. But will they...?"

gavron writes "The US Department of Justice will review the Nortel patent sale to the entity formed by Apple, Microsoft, and others. This is the same sale that the Canadian authorities declined to review because the $4B+ deal was valued by them at less than $328M. According to a (paywalled) Wall Street Journal report, 'The Justice Department wants to know whether [the consortium] intends to use them defensively to deter patent lawsuits against its members, or offensively against rivals.'"

CWmike writes "Almost anyone can snoop the secure data traffic of unpatched iPhones and iPads using a recently-revised nine-year-old tool, a researcher said as he urged owners to apply Apple's latest iOS fix. If iOS devices aren't patched, attackers can easily intercept and decrypt secure traffic — the kind guarded by SSL, which is used by banks, e-tailers and other sites — at a public Wi-Fi hotspot, said Chet Wisniewski, a security researcher with Sophos. 'This is a nine-year-old bug that Moxie Marlinspike disclosed in 2002,' Wisniewski told Computerworld on Wednesday. On Monday, Marlinspike released an easier-to-use revision of his long-available 'sslsniff' traffic sniffing tool. 'My mother could actually use this,' he said."

judgecorp writes "Apple's iPhone 5 is not announced yet, but 35 percent of consumers say they will buy it, when it comes out, even though they know nothing about it. The figure comes from an online survey of 3,000 US consumers by Experian's PriceGrabber shopping website."

chrb writes "The BBC have an interview with HTC CEO Peter Chou. Last week, a judge at the International Trade Commission found that HTC had violated two of Apple's patents. HTC shares fell 7% on the news. Chou predicts that HTC will win an appeal against the ITC finding in December. He also reveals that HTC is preparing to fight back; it will soon acquire an extra 235 patents from its takeover of S3 Graphics — including two that Apple has already been found guilty of infringing."

CWmike writes "Amazon bowed on Monday to Apple's newest App Store rules, and removed a link in its iPhone and iPad Kindle apps that took customers directly to its online store. The move was required to comply with new rules designed to block developers from evading the 30% cut that Apple takes from in-app purchases. In February, Apple CEO Steve Jobs laid down the law. 'Our philosophy is simple — when Apple brings a new subscriber to the app, Apple earns a 30% share,' said Jobs in a statement released Feb. 15. 'When the publisher brings an existing or new subscriber to the app, the publisher keeps 100% and Apple earns nothing.' Rhapsody updated its iPhone app last week to, among other things, remove the in-app subscribing link. Also on Monday, Google complied with Apple's new rules when it re-released Google Books — which had been yanked from the App Store — minus an in-app purchasing button."

snydeq writes "InfoWorld's John Rizzo sees Mac OS X Lion Server as a downgrade that may prompt a move to Windows Server. 'Mac OS X 10.7 Lion Server adds innovative features and a new low price tag, but cuts in services and the elimination of advanced GUI administration tools may force some enterprise departments to think twice about the role of Mac servers on their networks,' Rizzo writes. 'Looking more deeply inside Lion Server, it's impossible to avoid the conclusion that Lion Server is not built for those of us in IT. The $50 price tag — down from $500 — is the first clue that Lion Server trying to be a server for the consumer. But the ironic part for IT administrators is that Lion Server actually requires a greater degree of technical knowledge than its predecessors.'"

An anonymous reader writes "Researchers at Northeastern University have modified an iPhone to take readings from a special fluorescing nanoparticle tattoo ink, which can then measure sodium and glucose levels in the blood."

Trailrunner7 writes "Security researcher Charlie Miller, widely known for his work on Mac OS X and Apple's iOS, has discovered an interesting method that enables him to completely disable the batteries on Apple laptops, making them permanently unusable, and perform a number of other unintended actions. The method, which involves accessing and sending instructions to the chip housed on smart batteries, could also be used for more malicious purposes down the road. Miller discovered the default passwords set on the battery at the factory to change the battery into unsealed mode and developed a method that let him permanently brick the battery as well as read and modify the entire firmware. 'You can read all the firmware, make changes to the code, do whatever you want. And those code changes will survive a reinstall of the OS, so you could imagine writing malware that could hide on the chip on the battery. You'd need a vulnerability in the OS or something that the battery could then attack, though,' Miller said."