Business IT - Technology for your business

No. 1 Story

Telstra adds one million mobile services, but Sensis plummets

Telstra has revealed the addition of almost one million new mobile services in the six months to December 2011, but Sensis revenues plummeted 24 percent in 12 months.

read more

Laundry list of security fixes in iPhone 3.0

Business IT - Technology

We knew about the new features of iPhone 3.0, but now it's out Apple has spilled the beans about the security content.

The new features of iPhone 3.0 have been previously discussed on iTWire, but in line with Apple's usual practice the security patches were kept under wraps until the software was actually released.

Not surprisingly, some of the issues are familiar from previous Mac OS X updates. Examples include the handling of malicious PDF and other files, the processing of certain Unicode strings, and clickjacking.

iPhone 3.0 also includes updated versions of FreeType and libxml2, as recently seen in Mac OS X.

Other issuess appear to be iPhone OS specific. The way untrusted Exchange server certificates are handled has been tightened up, Mail now has a preference to turn off the automatic loading of remote images, and a trick that could allow calls to be placed without user approval has been thwarted.

MPEG-4 playback has been tweaked to prevent maliciously crafted videos causing the device to reset, installing a configuration profile no longer allows the overriding of a passcode policy set through ActiveSync, and clearing Safari's search history with the Settings application now really does remove the history.

Multiple JavaScript and other WebKit-related issues have also been fixed to avoid information disclosure, cross-site scripting, crashing or arbitrary code execution. Some appear to be generic, other iPhone-specific.

All told, the update addresses more than three dozen issues, some of them involving multiple vulnerabilities.

iPhone 3.0 is also applicable to the iPod touch, though owners of that device have to pay $US9.95 for the new software where iPhone owners receive it free of charge, ostensibly due to Apple's use of a subscription model for accounting for iPhone revenue.

Loading comments ...

- sponsored feature -

The Death of Traditional BI: What’s Next?

How to Make Business Discovery Work for Your Business IP PABX BUYING GUIDE

Business Discovery takes its cues from consumer apps. Like Google, it encourages us- ers to hunt for and explore data without worrying about or even noticing the underly- ing technology. Their entire experience is working within an intuitive interface to get real-time, self-service results with only minimal training. ...more