An anonymous reader writes "According to an article in Xconomy, iPhone hacker and author Jonathan Zdziarski was invited to speak at an Apple Store in Cambridge, MA last week where he talked about the history of iPhone hacking, jail-breaking, and limitations of the official SDK. From the article, "Zdziarski was one of the first software engineers to figure out how to hack the iPhone, and he's the author of a forthcoming O'Reilly Media book called iPhone Open Application Development, which gives readers explicit instructions on jail-breaking iPhones. So for Apple to give Zdziarski the podium at an Apple retail location is a little like Steve Ballmer inviting Linus Torvalds to speak at a Windows product launch." Zdziarski reports in his own blog how the open source community was on the iPhone developer scene as early as 2007, long before enterprises got there, and estimates that nearly 40% of all iPhones have been jail-broken to run the third-party community software installer. Finally, this story from Top Tech News suggests that open source software might actually create competition for Apple's "official" developers, because applications using the open source iPhone compiler are not subject to the same limitations as official Apple SDK programs are."

ZDOne writes "Apple might have finally come around to allowing third party developers to create applications for the iPhone, but only up to a point. ZDNet UK claims Apple is leaving itself vulnerable to the competition and to a loss of lustre by blocking background tasks on the device. The author notes, 'Perhaps it doesn't trust application designers or users very much. Perhaps it wants the best software for itself, where it can limit what it can do in order not to upset its telco friends. Whatever the reason, it reflects badly on Apple. The iPhone is not an iPod; it's a smartphone connecting to a universe of fast-changing data on behalf of innovation-hungry users. The sooner it stops pretending to be a 1981 IBM PC, the better it will be for everyone.'"

Multiple readers have written to let us know that the MacBook Air was the first laptop to fall in the CanSecWest hacking contest. The successful hijacking took place only two minutes into the second day of the competition, after the rules had been relaxed to allow the visiting of websites and opening of emails. The TippingPoint blog reveals that the vulnerability was located within Safari, but they won't release specific details until Apple has had a chance to correct the problem. The winner, Charlie Miller, gets to keep the laptop and $10,000. We covered the contest last year, and the results were similar.

recoiledsnake writes "The new Safari 3.1 for Windows has been hit with two 'highly critical'(as rated by Secunia) vulnerabilities that can result in execution of arbitrary code. The first is due to an improper handling of the buffer for long filenames of files being downloaded, and the second can result in successful spoofing of websites and phishing. This comes close on the heels of criticism of Apple for offering Safari as a update for approximately 500 million users of iTunes on Windows by default, and reports of crashes. There are currently no patches or workarounds available except the advice to stay clear of 'untrusted' sites." Further, Wormfan writes "The latest version of Safari for Windows makes a mockery of end user licensing agreements by only allowing the installation of Safari for Windows on Apple labeled hardware, thereby excluding most Windows PCs." Update: 03/27 17:23 GMT by Z : Dave Schroeder writes with the note that the license has been updated to correct this mistake.

jfruhlinger writes "Think today's world, where Apple is the innovative underdog, Google is the company that does no evil, and Microsoft sits atop its throne as ruler of an evil empire. Will this state of affairs last forever? You must not remember the days when everybody loved that scrappy upstart Bill Gates. Don Reisinger muses on the fickleness of consumer loves and hates. 'It's that same [level of] success and its own questionable privacy practices that will lead to Google's PR downfall and propel it into a position of disdain going forward. Trust me, the future of Apple and Google may look bright from an economic standpoint, but these companies will be hated one day too. Sad, but true.'"

Narrative Fallacy writes "If you've ever written about Apple products with even a hint of negativity, you'll appreciate Salon's excerpt from Farhad Manjoo's True Enough, about why the Apple tribe is so rabid. 'There are many tribes in the tech world: TiVo lovers, Blackberry addicts, Palm Treo fanatics, and people who exhibit unhealthy affection for their Roomba robotic vacuum cleaners,' writes Manjoo. 'But there is no bigger tribe, and none more zealous, than fans of Apple, who are infamous for their sensitivity to slams, real or imagined, against the beloved company.' Wall Street Journal columnist Walt Mossberg has even coined a name for the phenomenon — the 'Doctrine of Insufficient Adulation.' 'If I see the world as all black and you see the world as all white and some person comes along and says it's partially black and partially white, we both are going to be unhappy,' says psychologist Lee Ross at Stanford University. 'You think there are more facts and better facts on your side than on the other side. The very act of giving them equal weight seems like bias. Like inappropriate evenhandedness.'"

Mike writes "Apple is in discussions with the big music companies about an 'all you can eat' model for buying music that would give customers free access to its entire iTunes music library in exchange for paying a premium for its iPod and iPhone devices. Finally, it looks like the industry (or at least Apple) is 'getting it'. The real question is not whether the big music companies will go for it, but rather, who will be the first one to get smart and agree to offer it?"

An anonymous reader writes "Wired has a look at how the good and bad of Apple, their Yin and Yang, have come together to form a company that actually works. The piece looks at Steve Jobs' unusual and abrasive management style, otherwise known as 'Management Techniques From the Dark Side'. It's essentially a list of counterintuitive, suspicious-seeming and downright evil management techniques that work - for them."

TimeZone writes "Apparently, even subliminal exposure to the Apple logo can make you 'think different.' Researchers at Duke University subjected participants to subliminal images of the iconic Apple and IBM logos (during what subjects thought was a visual acuity test), and those who were shown the Apple logo generated more creative ideas after the test than did those who were shown the IBM logo. In a second test, subjects exposed to the Disney logo acted more honestly than those who saw an E! Channel logo." Here's a preprint of the paper (PDF) due for publication in the Journal of Consumer Research.

adamengst sends in an article from TidBITS in which Macintosh security expert Rich Mogull explains why he doesn't use antivirus software on the Mac, and why most Mac users shouldn't bother with it either. The article also touches on the question of when an increasing Mac market share might tip it over an inflection point into more active attention from malware writers. (Last month Apple had 14% of PC sales, but 25% of dollar value.)

The as-yet unreleased second iteration of iPhone hardware may already be compromised, reports Engadget and News.com. Members of the 'iPhone Dev Team' have (supposedly) made use of the recently released SDK to gin up a Beta 2.0 software hack. "Unlike previous hacks, this one isn't specific to the latest firmware version, it exploits the way that Apple designed the iPhone's main bootloader. According to the iPhone Dev Team, the iPhone verifies whether or not firmware code has been signed with an RSA certificate before allowing it to be written to memory. The team has apparently figured out a way to disable that check and allow unsigned code to be written to memory."

tuxgeek writes "A suit was filed Wednesday against Apple over the possibility that the iTunes music store and iPod are 'illegally using a patented method for distributing digital media over the Internet.' ZapMedia Services filed the suit, accusing the well-known OS and computer manufacturer of violating patents obtained just recently. 'The patents in question cover a way of sending music and other digital content from servers to multiple media players, a broad description that could also apply to a wide swath of other companies selling digital media and the devices to play it. ZapMedia said it met with Apple to discuss licensing, but Apple rebuffed the offer.'"

smallfries writes "After a long battle with Linux users in the UK, the BBC was forced into releasing a flash version of the iPlayer streaming service to fulfill their obligations to license-fee payers. After claiming that development of Linux and Mac versions of the iPlayer would take two years, Auntie Beeb has rushed to support the iPhone. iPhone users 'can be trusted' because their platform is locked down ... so the beeb opened a non-DRM hole in the iPlayer to support them. This was guarded by the extreme security of User Agent strings! Long story short, Linux and Mac users have made their own non-DRM, non-Microsoft platform from firebug and wget. UK users can now watch (and keep) their favorite BBC shows."

An anonymous reader writes "Apple's iPhone software development kit is already drawing complaints due to the strict terms of service. Voice over IP apps like Skype that attempt to use the cellular data connection will be blocked. Competing web browsers Firefox and Opera are forbidden. Even Sun is now backpedaling on its recent announcement of a java port, noting that there are some legal issues. Critics are already comparing Apple's methods to Comcast's anti-net neutrality filtering, and Microsoft's Netscape-killing antitrust tactics. Could Apple face government regulators?"

krquet notes an InfoWorld article on Sun's plans for the iPhone. After studying Apple's newly released SDK docs for 24 hours, Sun decided it was feasible to develop a JVM, based on Java Micro Edition, for both the iPhone and the iTouch. An analyst is quoted: "I think going forward, with the SDK, it takes out of Apple's control which applications are 'right' for the iPhone." The article doesn't speculate on how Apple might to react to such a loss of control. "Apple had not shown interest in enabling Java to run on the iPhone, but Sun plans to step in and do the job itself... The free JVM would be made available via Apple's App Store marketplace for third-party applications."

The New York Times is running a couple of stories about the future of the iPhone in the business world and Apple's plan to maintain control of application development. Now that the iPhone SDK has been released and the "App store" has been demonstrated, Steve Jobs is pushing for the adoption of the iPhone as a standard business tool. In addition, a venture capitalist named John Doerr has launched a $100 million "iFund" to spur development of applications for the iPhone. From the NYTimes: "Mr. Jobs was upfront that there are limitations on what applications can do. He talked about bans on pornography and malicious programs. He also said Apple will not allow any application to be installed on the machine other than through the iTunes store. Nor will applications be permitted that enable an end run around Apple's deals with wireless carriers. Many questions remain unanswered. How much streaming video will Apple allow, because the iPhone is such an interesting video device? Mr. Jobs did say that the application development environment will have a lot of capabilities for video playback. Will Apple allow a service like Last.FM to offer streaming music on the iPhone?"

Steve Jobs demonstrated a new "App Store" that will be pushed out to all iPhones in June. It's available now in beta. This will be the exclusive avenue developers will use to get their iPhone apps, written to the newly released SDK, to customers. Developers will get 70% of the proceeds from sales of their goods on the App store, with no further charges for hosting, credit-card processing, etc. Jobs called this "the best deal going to distribute applications in the mobile space."

eldavojohn writes "Over concerns for lack of an anti-phishing mechanism for Safari, Paypal is telling its Mac users to use another browser. An author from Ars Technica reveals that he has been using Camino and has fallen victim to a Paypal related phishing scam via e-mail so this story must hit home for him. 'Currently the Apple browser does not alert users to sites that could be phishing for your info, and it lacks support for Extended Validation. PayPal is, of course, a popular site among phishers in their neverending search for personal information, user IDs, and passwords. While it's not entirely fair singling out Safari (other Mac browsers like Camino also lack this support), it is perhaps at least a helpful reminder of the threat.'"

AcidAUS writes "Apple co-founder Steve Wozniak heaped less than lavish praise on the company's iPhone, MacBook Air and Apple TV products when visiting Sydney this morning. Wozniak said he was puzzled by the lack of 3G support on the iPhone and that he didn't believe the MacBook Air would be a hit."

spikedLemur writes "Vladimir Vukicevic of the Firefox team stumbled upon some questionable practices from Apple while trying to improve the performance of Firefox. Apparently, Apple is using some undocumented APIs that give Safari a significant performance advantage over other browsers. Of course, "undocumented" means that non-Apple developers have to try and reverse-engineer these interfaces to get the same level of performance. You really have to wonder what Apple is thinking, considering the kind of retaliation Microsoft has gotten for similar practices.