Oct 19

Although there are more signs lately that the worst of the recession is over, Apple is one of the few companies that has seen little of the effects of the recession to begin with.

We’ll find out if the company’s good health has remained during the quarterly checkup Monday afternoon. According to Wall Street, it’s been another good three months for the Cupertino, Calif.-based company. Apple’s stock price jumped 43 points during the quarter to close at $185.35. Because of a string of impressive earnings announcements dating back a year ago, the launch of the company’s latest operating system update, signs it gained share in the smartphone and computer markets, and a helpful accounting rule change, financial analysts are expecting good things from the company’s fiscal year fourth-quarter earnings.

Apple MacBook Pro

Did price cuts on the MacBook improve Mac sales for the quarter?

Analysts are expecting Apple to record earnings per share somewhere between $1.24 and $1.72, and revenue between $8.74 billion and $10.55 billion for the quarter ending September 30. Apple is known to provide consistently conservative guidance for future quarters, hence the wide gap in analyst estimates.

But a good way to know what’s to come can usually be seen in the unit sales reports. Last week IDC reported that Apple had amassed a 9.4 percent share of the U.S. PC market–a jump from the 8.6 percent of the previous quarter. Near the end of the previous quarter Apple offered some price cuts on most of its Mac models. The sales numbers for the quarter, whatever they end up being, will be regarded as a commentary on whether those price cuts went far enough.

Apple watcher Gene Munster over at Piper Jaffray says he’s had a peek at Mac unit sales for the quarter, and he says the company is on target to report sales of 2.8 million Macs. That would be an increase over the previous quarter’s sales of 2.6 million, and it makes sense: The third quarter is a traditional time for people to buy computers ahead of the back-to-school season, and Apple also released its long-awaited operating system update, Mac OS X 10.6, or Snow Leopard.

On the smartphone side of the business, if Apple does once again report good numbers, it’ll be one of the few in that industry. Despite constant attempts by rival handset makers to produce the "iPhone killer," Apple’s main competitors in the smartphone world have struggled during the most recent quarter–Nokia, Palm, and Research In Motion each posting disappointing results.

Piper Jaffray is estimating that Apple sold 7.5 million iPhones. Munster said inventory checks showed that demand for the iPhone 3GS is "outstripping supply," which means that iPhone sales for the next several quarters should be fairly steady. We should also get an update on the number of countries and carriers that have the latest iPhone model. Apple had said in July that it was supposed to be in 80 countries by the end of the summer.

The iPod is the only real question mark when it comes to Apple’s main revenue-generating products. The quarter ending in June was the first in which iPod sales saw a year-over-year drop. Apple acknowledged it last quarter, saying that it expected eventual declines in iPod sales, and that it was the reason it developed the iPod Touch. Chief Financial Officer Peter Oppenheimer actually broke out the individual sales numbers for each iPod model and cautioned that the company expected "to cannibalize ourselves with iPod Touch and iPhone."

A slew of new iPods–including the new camera-equipped Nano–were introduced near the end of the quarter, so the full effect of those new models probably won’t be visible until the following quarter.

Apple iPhone sales 

The biggest change during the quarter however had nothing to do with anything that had a keyboard or a touch screen. Apple was one of several companies to lobby (successfully) for an accounting rule change that, if applied to the most recent quarter, will likely show much higher revenue for the iPhone.

The practice–in which Apple has been recognizing revenue for the iPhone and Apple TV over a two-year period–was put in place to avoid charging a fee for every product upgrade. It was something Apple was told it would need to satisfy accounting regulations that require companies to establish a value for product upgrades. The new rule won’t change the amount of revenue coming into the company’s coffers, but it will provide a more accurate picture of how much money the iPhone in particular is bringing in every quarter.

Check back Monday afternoon. Apple’s results will be posted shortly after 1 p.m. Pacific.

Tagged with:
Jun 15

The surging popularity of the Twitter messaging service has broken at least one Twitter client application and affected another as a part of what is being called “the Twitpocalypse.”

Each message on Twitter is assigned a unique identification number. On Friday evening, the number of tweets exceeded 2,147,483,6471. While that doesn’t seem like a round number, it’s the largest number that can be stored as the data type known as a “signed integer.” Once that number was exceeded, some versions of some Twitter client apps could break in a fashion similar to what was expected during the Y2K “millennium bug” era.

The first apparent victim of the Twitpocalypse was The Iconfactory’s Twitterrific for iPhone, which stopped working immediately following the event. Though The Iconfactory released a version of the app that the company felt addressed the Twitpocalypse, apparently that assumption was incorrect. Twitterrific users on the iPhone and iPod touch who attempt to contact the service will receive a “YAJL error 3” indication.

                                                                                                                                                            more

Tagged with:
May 20

Introduction

Five months ago, CVE-2008-5353 and other vulnerabilities were publicly
disclosed, and fixed by Sun.

CVE-2008-5353 allows malicious code to escape the Java sandbox and run
arbitrary commands with the permissions of the executing user. This may
result in untrusted Java applets executing arbitrary code  merely by
visiting a web page hosting the applet. The issue is trivially
exploitable.

Unfortunately, these vulnerabilities remain in Apple’s shipping JVMs, as
well as Soylatte 1.0.3. As Soylatte does not provide browser plugins,
the impact of the vulnerability is reduced. The recent release of
OpenJDK6/Mac OS X is not affected by CVE-2008-5353.

Work-Arounds

    * Mac OS X users should disable Java applets in their browsers and
      disable ‘Open "safe" files after downloading’ in Safari.
    * Soylatte users running untrusted code should upgrade to an
      OpenJDK6-based release, where possible. No future releases of the
      JRL-based Soylatte branch are planned at this time. If this is an
      issue for you, please feel free to contact me.
    * No work-around is available for users otherwise running Java
      untrusted code.

Proof of Concept

Unfortunately, it seems that many Mac OS X security issues are ignored
if the severity of the issue is not adequately demonstrated. Due to the
fact that an exploit for this issue is available in the wild, and the
vulnerability has been public knowledge for six months, I have decided
to release a my own proof of concept to demonstrate the issue.

If you visit the following page, "/usr/bin/say" will be executed on your
system by a Java applet, with your current user permissions. This link
will execute code on your system with your current user permissions. The
proof of concept runs on fully-patched PowerPC and Intel Mac OS X
systems.

http://landonf.bikemonkey.org/static/moab-tests/CVE-2008-5353/hello.html

compiled/decompiled: http://milw0rm.com/sploits/2009-javax.tgz

Tagged with:
preload preload preload