rfc1394 writes "While the regular price of an iPhone is $199 if you take a 2-year contract with AT&T, if you're willing to pay a lot more you can get one without a contract. An article in InfoWorld mentions that 'Freedom will come with a price — $599 for an 8GB device and $699 for a 16GB — but this will mark the first time consumers in the United States are able to buy an iPhone without being tied down to a two-year contract. The phone probably would still be locked for use only on AT&T's network, said Jupiter Research analyst Michael Gartenberg. But buyers could choose a pay-as-you-go plan for voice service.' The question still remains, does it make any sense to pay that much for a phone that is still locked to AT&T's network even if you aren't bound to a contract?" Update: 07/05 18:21 GMT by T : An anonymous reader suggests that there is a convoluted but possibly cheaper route to an new, unlocked iPhone.

xmedar writes "In his talks about the history of Apple, Woz has often recounted how the 1971 Esquire article 'Secrets of the Little Blue Box' set him on the road to phone phreaking. Now someone has obtained the FBI file of one of the phreaks, Joe Engressia (who later changed his name to Joybubbles), via Freedom of Information requests. The file reveals that Engressia was illegally wiretapped by the FBI and the phone company back in 1969. J. Edgar Hoover considered the blind college student a national security risk and wrote a memo about him to John Ehrlichman."

alias420 writes "You can save on long distance and air time with the new 3G iPhone. iPhone Hacks has the scoop on an upcoming iPhone 2.0 App named 'iCall', that will let you switch between VoIP and normal GSM calls anywhere in North America. You can check out their recently released video proof of call switching in action . This software requires no hacks and will be completely official. Here is a little quote from the developer: 'We are part of the Apple iPhone developer program. This is not an application for you naughty jail breakers ;-)'"

I Don't Believe in Imaginary Property writes "F-Secure is reporting that there are two new Mac OS X trojans. The first is just a proof-of-concept from the MacShadows people that takes advantage of the unpatched ARDAgent vulnerability to get root access when run by the user. The second relies on social engineering: it's a poker game that requests the user's password, claiming to have detected a 'corrupt preference file.' It then takes control of the computer. Now that the source of the proof-of-concept is publicly available, we can expect that future trojans won't just politely request your password."

eXchange writes "Well-known hacker Dino Dai Zovi has written an article at ZDNet discussing last week's discovery of a critical threat to Mac OS X, and another announcement of a Trojan horse exploiting this discovery. He suggests that Snow Leopard, or Mac OS X 10.6, should integrate more robust means of preventing malware attacks. Some of the suggestions he has include mandatory code-signing for kernel extensions (so only certified kernel extensions can run), sandbox policies for Safari, Mail, and third-party applications (so these applications cannot do anything to the system), and some lower-level changes, such as hardware-enforced Non-eXecutable memory and address space layout randomization."

SecureThroughObscure writes "Just a short time after Apple's recent acknowledgment of and patch for the Safari Carpet Bomb 'blended' IE flaw, Microsoft researcher Billy Rios shows that Safari is still useful in a blended attack, this time with Firefox 2/3. (ZDNet's Nate McFeters also spread the word.) Rios claimed that he is able to use Carpet Bomb, despite the recent patch, to steal arbitrary files from victims who also have Firefox 2/3 installed. Both Rios and McFeters pointed out that Apple, which took some heat for not originally patching, actually did a good job of addressing the issue, as the code execution angle was not originally understood (the details came out later). Rios is withholding details of the new attack vector until Apple has had time to patch or respond to this issue."

jsuda writes "At least a half-dozen times in the book 'Foundations of Mac OS X Leopard Security' the authors state that there is a misconception that the Macintosh computer is immune from security problems. That allegation may explain why there are very few books published (and nearly none in recent years) about security for the Mac. This book is meant to change all that. The authors acknowledge that the Mac OS X software has had little of the security problem experience of Windows (and other operating systems, to a lesser extent) but they spend 455 pages detailing exactly where and how the Macintosh platform is (or may be) vulnerable." Read below for the rest of Jsuda's review.

Titoxd writes "Apple has released a new version of Safari that fixes the carpet bomb vulnerability in Safari 3.1 for Windows. This comes in the heels of Microsoft recommending against using Safari in Windows, as well as the release of code exploiting this vulnerability."

An anonymous reader writes "Half the Mac OS X boxes in the world (confirmed on Mac OS X 10.4 Tiger and 10.5 Leopard) can be rooted through AppleScript: osascript -e 'tell app "ARDAgent" to do shell script "whoami"'; Works for normal users and admins, provided the normal user wasn't switched to via fast user switching. Secure? I think not." On the other hand, since this exploit seems to require physical access to the machine to be rooted, you might have some other security concerns to deal with at that point, like keeping the intruder from raiding your fridge on his way out.

orenh writes "Recent data indicate that Apple engineers have significantly lower salaries than their Silicon Valley peers: $89,000 at Apple, versus $105,000 at Yahoo and $112,000 at Google. Paying lower salaries had a major impact on Apple's bottom line when it was struggling in the market up until 2004. But now that Apple is highly profitable, these lower salaries are no longer a factor in Apple's success. Will Apple have to raise salaries to match the market rate, or face defections?"

99BottlesOfBeerInMyF writes "AppleInsider is running an article about Apple's new SproutCore Web application development framework, utilizing Javascript and some nifty HTML 5 to offer a 'Cocoa-inspired' way to create powerful Web applications. Apple built on the OSS SproutIt framework developed for an online e-mail manager called 'Mailroom.' Apple used this framework to build their new Web application suite (replacing .Mac) called MobileMe. Since SproutCore applications rely on JavaScript, it seems Apple had good reason to focus on Squirrelfish for faster JavaScript interpretation in Webkit. Apple hosted a session last Friday at WWDC introducing SproutCore to developers, but obviously NDAs prevent developers from revealing the details of that presentation. Apple has a chance here to keep the Web becoming even more proprietary as Silverlight and Flash battle it out to lock the Web application market into one proprietary format or another. Either way, this is a potential alternative, which should make the OSS crowd happy." TechDIrt's writeup on the browser evolving towards acting as an OS expands on the theme AppleInsider raises.

JD-1027 writes in to kick off a discussion of OS X Snow Leopard. Apple's stated goal: "Taking a break from adding new features, Snow Leopard — scheduled to ship in about a year — builds on Leopard's enormous innovations by delivering a new generation of core software technologies that will streamline Mac OS X, enhance its performance, and set new standards for quality." The technologies: Grand Central to get better use of multiple processors and multicore chips, OpenCL to tap the power of the GPU, 64 bit so we can finally have our 16 TB of RAM, QuickTime X for optimized modern codec performance, and built in Exchange support in iCal, Address Book, and Apple Mail that most likely will help get Macs into corporate environments. We've previously discussed ZFS in the server version of Snow Leopard."

number655321 writes "Apple has confirmed the inclusion of ZFS in the forthcoming OS X Server Snow Leopard. From Apple's site: 'For business-critical server deployments, Snow Leopard Server adds read and write support for the high-performance, 128-bit ZFS file system, which includes advanced features such as storage pooling, data redundancy, automatic error correction, dynamic volume expansion, and snapshots.' CTO of Storage Technologies at Sun Microsystems, Jeff Bonwick, is hosting a discussion on his blog. What does this mean for the 'client' version of OS X Snow Leopard?"

snydeq writes "A hacker has posted attack code that exploits critical flaws in the Safari and Internet Explorer Web browsers. The source code can be used to run unauthorized software on a victim's machine, and could be used by criminals in Web-based computer attacks, security experts say. The public example of the attack code allows attackers to litter a victim's desktop with executable files, an attack known as 'carpet bombing.' In combination with bugs in Windows and Internet Explorer, attackers can run unauthorized software on a victim's computer."

In January we discussed a blog entry revealing that Apple had "crippled" its DTrace port. As the author notes in a followup post, to say that DTrace had been "crippled" was at least overstated: "Unfortunately, most reactions seized on a headline paraphrasing a line of the post — albeit with the critical negation omitted." In an updated entry, the poster notes that Apple has made good (so we have too): "One issue was that timer based probes wouldn't fire if certain applications were actively executing (e.g. iTunes). This was evident both by counting periodic probe firings, and by the absence of certain applications when profiling. The good news is that Apple has (quietly) fixed the problem in Mac OS X 10.5.3."

An anonymous reader writes "It looks like Apple and its wireless operator partners have finally figured out a way of cracking down on iPhone unlockers by making it a requirement to sign up for a contract before you can get your hands one. "It's obvious why this has happened though. This method means you're tied into a contract, or you're paying O2 and Apple a massive wad of cash for the privilege of owning a 3G iPhone. We're disappointed about this decision, but it does make business sense." Both ATT in the US and O2 in the UK are implementing the new activation system on July 11th, when the iPhone 3G goes on sale."

Many of us have been watching Apple's WWDC 2008 keynote unfold live. There are many exciting tidbits, but most of all is the announcement of the 3G iPhone. Featuring an even thinner profile, black plastic back, metal buttons, flush headphone jack, improved audio, GPS support, and improved battery life, this is bound to make quite a few people stand up and take notice. Update 18:54 GMT by SM: Best of all it looks like they really took the price point to heart, 8GB iPhones are now $199 and a 16GB model will be available for $299, coming to an Apple store riot near you on July 11,2008.

Joe Jay Bee writes "The British rock band Radiohead, who previously stated that they wouldn't want to have their music on Apple's iTunes Music Store (and, indeed, were unhappy when their Kid A album was released via the store) have performed something of an about-face; virtually their entire catalog, including singles and their B-Sides, has appeared on the store. The band previously said they only wanted their work sold as complete albums, which Apple refused to go along with; however their tack has apparently changed, and all their songs are available to mix and match, including their most recent work, In Rainbows. The albums are all available in DRM-free AAC format."

Ian Lamont writes "In the runup to Apple's WWDC 2008, Chris Tompkins thinks that the iPhone's gaming potential 'might finally put the lackluster Java-based cell phone gaming market to death.' He cites the iPhone's use of Core Animation adapted for ARM processors, which he says allows for the advanced effects of OS X and now OpenGL-accelerated 3D games, as well as the importance of an on-demand store and Internet connection. Tompkins says that while certain genres lend themselves to the iPhone's touch controls, such as real-time strategy games (think StarCraft) the lack of physical controls will force developers to creatively approach the multitouch and accelerometer on the iPhone. His advice to Apple — make a compelling overture to independent game designers, and treat them like rock stars. Tompkins, incidentally, is one of several people who have recently pointed to Apple's mobile gaming potential."

TedCHoward writes "On the heels of the recent mention of HyperCard comes the launch of a brand new site called TileStack. Cnet's Webware blog writes, 'The idea behind it is to bring old HyperCard stacks back to life by putting them on the Web, meaning you can take some of those long lost creations from the late '80s and early '90s and make them working Web apps. You simply upload them to TileStack's servers and they'll be converted and hosted for just you or the entire world to use once again... Since the service runs without Flash... TileStack is perfect for the iPhone and other devices that run on the Web.' They also have a video showing the upload process."