Stan's List

A minor update according to the version number, but an important security update, none the less

Security Fixes in 2.0.0.4:

MFSA 2007-17 XUL Popup Spoofing
MFSA 2007-16 XSS using addEventListener
MFSA 2007-14 Path Abuse in Cookies
MFSA 2007-13 Persistent Autocomplete Denial of Service
MFSA 2007-12 Crashes with evidence of memory corruption (rv:1.8.0.12/1.8.1.4)

Fire up Firefox (it is not your default browser?) and a dialog window should open inviting you to update. Or go to English English for a direct download.

Ars Technica have discovered information stored inside iTunes Plus tracks that identifies the new original purchaser.

We started examining the files this morning and noticed our names and e-mail addresses in the files, and we’ve found corroboration of the find at TUAW, as well. But there’s more to the story: Apple embeds your account information in all songs sold on the store, not just DRM-free songs. Previously it wasn’t much of a big deal, since no one could imagine users sharing encrypted, DRMed content. More …

As announced, with iTunes 7.2, you can preview and purchase iTunes Plus music–new higher-quality, DRM-free music downloads from participating music labels.

Apple also announced the launch of iTunes U, a dedicated area within the iTunes Store (www.itunes.com) featuring free content such as course lectures, language lessons, lab demonstrations, sports highlights and campus tours provided by top US colleges and universities including Stanford University, UC Berkeley, Duke University and MIT.