Download Remote Control for Mac & Classic Apple TV iPhone and iPod Touch
Download link
Torrent Mirror
Showing posts with label apple. Show all posts
Showing posts with label apple. Show all posts
Friday, April 21, 2017
HP Spectre vs Apple MacBook 12 inch vs Razer Blade Stealth vs Dell XPS 13 Super slim thin laptop
HP Spectre vs Apple MacBook 12 inch vs Razer Blade Stealth vs Dell XPS 13 Super slim thin laptop
CNET: The skinny on super-slim laptops Slim laptops have been trendy before, from the original MacBook Air to the now-forgotten ultrabook movement. But unique to 2016 is a new generation of systems that combine thinner-than-ever designs with powerful components, high-resolution screens, and prices that hit a very achievable mainstream sweet spot. Much of this is thanks to smaller, more efficient components, especially sixth-generation Core i-series processors from Intel, as well as the companys second generation of Core M chips, the latter of which are able to run in upscale fanless designs while still powering everyday apps from word processors to web browsers, as well as high-definition video streaming services and even mainstream games. Note that this roundup only includes clamshell laptops, not Windows tablets with clip-on keyboard covers and docks -- those can get down to well under 10mm, but only when you exclude the keyboard add-ons entirely. See http://cnet.co/29bXUH8
Available link for download
Friday, March 10, 2017
Java Critical Updates Apple Java 10 6 Update 15 Java 6u45 Apple Java 2013 002 Java 6u45 Oracle Java 7u21
Java Critical Updates Apple Java 10 6 Update 15 Java 6u45 Apple Java 2013 002 Java 6u45 Oracle Java 7u21
--[Updated 10:30 pm 2013-04-17 to reflect the correct version of Java provided by Apple, 6u45]
There was a scheduled Java update on Tuesday 2013-04-16. Both Apple and Oracle provided updates. Here is the list:
From Apple
1) Java for Mac OS X 10.6 Update 15
Available via Software Update. This updates Mac OS X 10.6 Snow Leopard users to Java version 6 update 45, aka 6u45.
Apples security content document:
http://support.apple.com/kb/HT5734
2) Java for OS X 2013-002
Available via Software Update. This updates OS X 10.7 Lion and 10.8 Mountain Lion users to Java version 6 update 45, aka 6u45.
Apples security content document:
http://support.apple.com/kb/HT5734
From Oracle
Java 7 update 21, aka 7u21
Available directly from Oracle via the link above.
Oracle Java SE Critical Patch Update Advisory - April 2013:
http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
PROBLEM WITH APPLES 2013-002 UPDATE
Apparently, it is NOT up-to-date!
Apple states that it is providing Java 6 update 45. However, their documentation is not listing the patching of all the known CVE security holes Oracle lists for Java 6 update 43 and below. I have documented the difference ahead.
[Note that earlier in the day it was not clear that Apple had updated beyond Java 6 update 43. Now apparently their documentation is making it clear that Java 6 update 45 is indeed what is provided. Apologies if I added to the confusion!]
Therefore, if you have OS X 10.7.3 or higher on you Mac, and you use Java while browsing the Internet, I STRONGLY suggest installing Oracles Java 7 update 21 (7u21) on top of Apples update.
Current Java CVE Issues
Oracles Java 7u21 patches 42 CVE security holes. Apples Java 6u45 patches 21 CVE security holes.
You can access Oracles Java SE Risk Matrix here:
http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html#AppendixJAVA
Im going to restate Oracles list of CVEs below in order to point out what has been patched and what remains unpatched in each of the updates from Oracle and Apple. Those that are in bold have been patched by both Oracles 7u21 update and Apples 6u42 update. Those in plain text have only been updated in Oracles 7u21 update. At the end of the list is one CVE in italics that was patched by Apples 6u42 update but is not listed in Oracles 7u21 update and remains listed but unspecified in the CVE databases. Those listed in red affect Java 7 only, not Java 6.
CVE-2013-2383
CVE-2013-2384
CVE-2013-1569
CVE-2013-2434
CVE-2013-2432
CVE-2013-2420
CVE-2013-1491
CVE-2013-1558
CVE-2013-2440
CVE-2013-2435
CVE-2013-2431
CVE-2013-2425
CVE-2013-1518
CVE-2013-2414
CVE-2013-2428
CVE-2013-2427
CVE-2013-2422
CVE-2013-1537
CVE-2013-1557
CVE-2013-2421
CVE-2013-0402
CVE-2013-2426
CVE-2013-2436
CVE-2013-1488
CVE-2013-2394
CVE-2013-2430
CVE-2013-2429
CVE-2013-1563CVE-2013-2439
CVE-2013-0401
CVE-2013-2419
CVE-2013-2424
CVE-2013-1561
CVE-2013-1564
CVE-2013-2438
CVE-2013-2417
CVE-2013-2418
CVE-2013-2416
CVE-2013-2433
CVE-2013-1540
CVE-2013-2423
CVE-2013-2415
CVE-2013-2437
Summary: If I can believe both Apple and Oracles lists of patched CVEs, this means that the following CVE security holes REMAIN in Apples Java 6u45 update:
CVE-2013-1518 - Unspecified details.
CVE-2013-2439 - Unspecified details.
CVE-2013-0401
Oracle Java 7 Update 17, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013.CVE-2013-2418 - Unspecified details.
Again note: Documentation confusion indicates these four CVEs were not patched by Apples Java 6u45 update. Ideally, Id like to verify that this is the fact in the near future. Im hoping this discrepancy in documentation is straightened out.
CONCLUSION:
If you want to surf the net with Java running, and youre using OS X 10.7.3 or higher, please install Apples Java 6u45 update FIRST, then install Oracles Java 7u21 update.
We know full well that there are still unpatched security holes in Java 7u21. Therefore, it is CRITICAL to Just Turn Java Off until you have loaded a trusted web page. Then turn Java ON and reload that page. Before you leave that page, Just Turn Java Off again. Ive covered how to turn Java on and off in previous posts.
STUPID NEWS:
Oracle has REMOVED the checkboxes for turning Java On and Off as of Java 7u21. Therefore, I cant rant about their dysfunctionality any longer, Oracle gave up trying to get their checkboxes to work, and apparently Oracle no longer even pretends there is a way to turn Java off inside its own control panel. Stupid deluxe. I have to wonder if Oracle itself understands Java well enough to get dead simple checkboxes to work.
I find this to be incredibly shameful.
Oracle: I HATE YOU.
And Apple: Either your documentation of patched CVEs is incomplete, or Oracle has provided an erroneous list of current CVEs! Either way, Id feel more secure knowing the four unpatched CVEs I list above actually had been patched by 6u45, or that they were actually inapplicable to 6u45. Im left confused as to the full state of affairs. No wonder newbies and regular users find these updates confusing.
--
Available link for download
Wednesday, December 21, 2016
iPad 3 The New IPad for New Apple Traditional Tablet Product
iPad 3 The New IPad for New Apple Traditional Tablet Product
Apple had lauched new version for iPad. This Gadget not taked name as iPad3, but they use "New iPad" name. All people learned issue about it before they launch this gadget. And now New iPad alredy you buy at your town.
Several fitur that could be found New iPad just among them:
1. The Retina screen a fitur that most wait by user iPad previous became the reality. Retina technology in the screen iPad this enabled you to see the picture with the high quality. Could be ascertained, iPad just really will spoil his users eyes. How not, one gadget sailed 9 inch this will have 3 million piksel (that meant 1 million piksel more of the HD television). Satisfied the eyes.
2. The Processor of A5X Gadget just this of course required the brain that have a capacity high also. It was for that purpose Apple equipped iPad with the newest processor, A5X. Lebih fast, with the living period (continue to) 10 hours. Could be confirmed time played games and edited your photograph will not be disturbed with the activity looked for the plug.
3) The Camera 5 of MP (first) used iPad 2, you possibly felt bad him the quality of the camera iPad 2 still quality were on a level with VGA. Bad dream ended. Apple supported your photography hobby by drowning the camera 5 the MPs in iPad newest. Goodbye, the pocket camera?
4) 4G LTE the Series iPad just has supported the network 4G. the happy News for the user who came from the country with the high Internet connection.
And now this newest tablet slid to the market in the USA and 10 other countries. Please buy it if you intersted an need for Completely Prctice Gadget. The New iPad.
Available link for download
Tuesday, December 20, 2016
iPod Touch Remote Control for Mac Classic Apple TV iPhone and iPod Touch
iPod Touch Remote Control for Mac Classic Apple TV iPhone and iPod Touch
Download Remote Control for Mac & Classic Apple TV iPhone and iPod Touch
Available link for download
Friday, December 2, 2016
ITS OVER For Now FBI DOJ Vacates Court Date Against Apple
ITS OVER For Now FBI DOJ Vacates Court Date Against Apple
--
This evening, MacNN published that:
Tomorrows iPhone 5c court hearing vacated by judge after request
A few hours ago, the US Department of Justice filed to vacate tomorrows hearing, as it has apparently found another method to access the San Bernardino shooters work-owned iPhone 5c. The filing says that on Sunday, an "outside party demonstrated to the FBI a possible method for unlocking Farooks iPhone" which "should eliminate the need for the assistance from Apple Inc. ("Apple") set forth in the All Writs Act Order in this case." . . .DOJ Motion To Vacate Hearing
The government is planning to perform more testing on the iPhone 5c to determine suitability of the proposed procedure, and report back to the courts on April 5 with progress, which may yet result in Apple having to appear and defend its position.
So, see you again April 5th! (?)
It is so easy at this point to speculate what is REALLY going on at the FBI and DOJ. But lets sit tight and take this forced break in the proceedings. I expect full well that there will be more attempts to wreck the First, Fourth and Fifth Amendments to the US Constitution ahead. (0_o)
--
--
Available link for download
Wednesday, November 23, 2016
Java Updates! Apple JRE 6u43 Oracle Java Plug in 7u17
Java Updates! Apple JRE 6u43 Oracle Java Plug in 7u17
--
DéDéDéjà vVvVu bZzzt@_@
I) From Apple: Java for Mac OS X 10.6 Update 14
This update includes:
- A) JRE (Java Runtime Engine) version 6u43 (1.6 update 43), installed into OS X.
- B) Java Plug-in version 6u43
About Java for Mac OS X 10.6 Update 13
Java for Mac OS X 10.6 Update 13 delivers improved security, reliability, and compatibility by updating Java SE 6 to 1.6.0_41.
On systems that have not already installed Java for Mac OS X 10.6 update 9 or later, this update will configure web browsers to not automatically run Java applets. Java applets may be re-enabled by clicking the region labeled "Inactive plug-in" on a web page. If no applets have been run for an extended period of time, the Java web plug-in will deactivate.
Please quit any web browsers and Java applications before installing this update.
About the security content of Java for OS X 2013-002 and Mac OS X v10.6 Update 14
Impact: Multiple vulnerabilities in Java 1.6.0_41
Description: Multiple vulnerabilities existed in Java 1.6.0_41, the most serious of which may allow an untrusted Java applet to execute arbitrary code outside the Java sandbox. Visiting a web page containing a maliciously crafted untrusted Java applet may lead to arbitrary code execution with the privileges of the current user. These issues were addressed by updating to Java version 1.6.0_43. Further information is available via the Java website at
http://www.oracle.com/technetwork/java/javase/releasenotes-136954.html
CVE-ID
CVE-2013-0809
CVE-2013-1493
II) From Apple: Java for OS X 2013-002, for OS X 10.7 and 10.8.
About Java for OS X 2013-002
Java for OS X 2013-001 delivers improved security, reliability, and compatibility by updating Java SE 6 to 1.6.0_41.
On systems that have not already installed Java for OS X 2012-006, this update disables the Java SE 6 applet plug-in. To use applets on a web page, click on the region labeled "Missing plug-in" to download the latest version of the Java applet plug-in from Oracle.
Please quit any web browsers and Java applications before installing this update.
About the security content of Java for OS X 2013-002 and Mac OS X v10.6 Update 14
Impact: Multiple vulnerabilities in Java 1.6.0_41
Description: Multiple vulnerabilities existed in Java 1.6.0_41, the most serious of which may allow an untrusted Java applet to execute arbitrary code outside the Java sandbox. Visiting a web page containing a maliciously crafted untrusted Java applet may lead to arbitrary code execution with the privileges of the current user. These issues were addressed by updating to Java version 1.6.0_43. Further information is available via the Java website at
http://www.oracle.com/technetwork/java/javase/releasenotes-136954.html
CVE-ID
CVE-2013-0809
CVE-2013-1493
As per usual, Apples documentation is a MESS. The security page for Java for OS X 2013-002 is inexplicably labeled as being for 2013-001. (0_o) Hopefully, when you visit the page, someone at Apple will have noticed and repaired the blundering. Again, this is a long term problem with Apples documentation team, incredibly confusing, annoying and dysfunctional. Im calling them out, yet again.
Dear Apple, please FIX YOUR DOCUMENTATION TEAM! For REALZ!
III) From Oracle: Java Plug-in 7u17, for OS X 10.7.3 - 10.8 only (not 10.6).
Java software for your computer, or the Java Runtime Environment, is also referred to as the Java Runtime, Runtime Environment, Runtime, JRE, Java Virtual Machine, Virtual Machine, Java VM, JVM, VM, or Java download.
Oracle Security Alert for CVE-2013-1493
Description
This Security Alert addresses security issues CVE-2013-1493 (US-CERT VU#688246) and another vulnerability affecting Java running in web browsers. These vulnerabilities are not applicable to Java running on servers, standalone Java desktop applications or embedded Java applications. They also do not affect Oracle server-based software.
These vulnerabilities may be remotely exploitable without authentication, i.e., they may be exploited over a network without the need for a username and password. For an exploit to be successful, an unsuspecting user running an affected release in a browser must visit a malicious web page that leverages these vulnerabilities. Successful exploits can impact the availability, integrity, and confidentiality of the users system.
Due to the severity of these vulnerabilities, and the reported exploitation of CVE-2013-1493 "in the wild," Oracle strongly recommends that customers apply the updates provided by this Security Alert as soon as possible.
Ive tested this update. The Control Panel system preferences pane is the same cruddy thing as last time. The checkboxes do NOT work. Jam the Security setting to Very High and even then, dont count on it actually working properly. Instead, if you must use Java, keep Java OFF in all your web browsers until you are at a verified safe website, then turn Java on, then reload the website for functionality. Then, BEFORE you leave that web page, turn Java OFF again.
The concept is to avoid any possibility of drive-by Java infections from maliciously hacked web pages. We learned last month that an entirely reputable iOS development website was maliciously hacked such that many developers were drive-by infected via Java. This included certain individual computers at Apple, Twitter, Facebook and others being infected. IOW, it can be extremely difficult to know if a website is absolutely safe. The best option is to Just Turn Java OFF. Only turn it on when a website REQUIRES Java to run for a service you must use. Then be sure to Just Turn Java OFF again BEFORE you leave that website. This is critical. Java is that dangerous.
Summary:
For users of OS X 10.6, only, install Java for Mac OS X 10.6 Update 14.
For users of OS X 10.7.3 through 10.8.x, install BOTH Java for OS X 2013-002 and Oracles Java Plug-in 7u17.
Be as safe as possible when surfing the Internet. Just Turn Java OFF until you require it. Just Turn Java OFF again immediately after you are finished using it.
Be seeing you, soon no doubt, for the next set of Java updates.
--
Available link for download
Friday, September 16, 2016
Invalid Apple PGP GPG Key! Is It Fake Or Is It A Blunder
Invalid Apple PGP GPG Key! Is It Fake Or Is It A Blunder
--
[Updated and solved at 3:22 pm. See the Addendum below.]At 1:57 pm today, I received an email from Apple entitled "APPLE-SA-2014-05-15-1 OS X Mavericks v10.9.3".
The problem? It is signed with an INVALID PGP/GPG KEY. The public key in question is ID 0xEE3A8EED. No such key!
For those unfamiliar with PGP or GPG, a public key is part of a key exchange process which allows someone sending email to verify exactly who they are. They have uploaded their public key to the public key server, used by everyone for such exchanges. When they send an email, that public key is sent along in the email. Then the receiver can verify exactly who sent them the email by checking for the key on the key server.
Obviously, Apple uses public keys in order to allow you and me to know when an email message from them is real, as opposed to being FORGED by some crook or loon.
So what are we to make of an email from Apple that has an INVALID KEY?!
The answer is:
Assume its a FAKE!
So Apple! Did you really send me this 10.9.3 announcement?
OR
Is this a fraud?!
OR
Is the Public Key Server messed up?
If Apple really did send me this email, and the server is working: OOPS! Apple pulled a HUGE BLUNDER!
Im not going to share the email here in case it really is fraudulent. More later as my colleagues and I investigate this mysterious situation.
--
ADDENDUM: The Solution!
I beat Apples key to the key server!
The key in question is NOW valid. There is no way to know when Apple uploaded this new key to the key server. But clearly, it was not being read out by the server at the time they sent their 10.9.3 announcement.
So the problem is, I have to assume, the PGP/GPG key server has a lag AND Apple delayed uploading their new key to the server until today. Their new key was created on May 2nd, would you believe. So thats apparently quite a delay between key creation and key upload to the server. I wish there was zero delay at the key server. How much is server lag contributing to the problem? Im concerned enough to investigate that aspect of the further. I have networked with the GPG developer folks for years. Therefore, Ill attempt to chat with them about this situation.
CONCLUSION: Case Closed!
--
Available link for download
Subscribe to:
Posts (Atom)