Stan's List

Bloomberg story reports that EMI has experienced positive initial results in its DRM-free online music experiment.

“The initial results of DRM-free music are good,” Lauren Berkowitz, a senior vice president of London-based EMI, is quoting as saying at an industry conference last week.

Amazon.com and PassAlong Networks will also sell EMI’s DRM free music. More …

Apple sells one of every seven notebooks

Apple now third largest U.S. music retailer

Electronista reports that Apple has said that the iPhone will support Microsoft Excel and Word documents. A number have criticized Apple for not offering support of standard file formats.

They also say that Apple is working to integrate email support for the available corporate email infrastructure, which would remove yet another impediment to widespread adoption of the device by enterprise users. More …

You can see it in operation in this updated iPhone guided tour

Marketcircle, maker of Daylite Productivity Suite and Billings business software for the Mac, released iPhoney. iPhoney gives you the opportunity by providing a pixel duplication of a true iPhone. Using the Safari engine iPhoney is able to display a iPhone’s 320 x 480 or 480 by 320 web window. The major difference is that a computer monitor display is generally between 72 and 96 pixels every inch, where iPhone will have 160 pixels. This may require rethinking your design. More …

Actually, you don’t. Marketcircle has not implemented the iPhone’s web zooming function yet in iPhoney–it’s coming soon.

Security Update 2007-006 is recommended for all users and improves the security of the following component:

*WebCore

CVE-ID: CVE-2007-2401

Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.9 or later, Mac OS X Server v10.4.9 or later

Impact: Visiting a malicious website may allow cross-site requests

Description: An HTTP injection issue exists in XMLHttpRequest when serializing headers into an HTTP request. By enticing a user to visit a maliciously crafted web page, an attacker could conduct cross-site scripting attacks. This update addresses the issue by performing additional validation of header parameters. Credit to Richard Moore of Westpoint Ltd. for reporting this issue.

*WebKit

CVE-ID: CVE-2007-2399

Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.9 or later, Mac OS X Server v10.4.9 or later

Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution

Description: An invalid type conversion when rendering frame sets could lead to memory corruption. Visiting a maliciously crafted web page may lead to an unexpected application termination or arbitrary code execution. Credit to Rhys Kidd of Westnet for reporting this issue. Downloads

A rare Red Herring article (actually a Reuters article carried by them):

They want to be as disruptive by their absence as by their presence, so they’re happy to have this discussion go on ad nauseam in the media,” said Yankee Group cell phone analyst John Jackson. “This is all a big part of the branding exercise for these guys. We’re pawns in the Apple brand game. More …

In preparation for the launch of the iPhone, AT&T is adding about 2,000 temporary employees to cope with the influx of shoppers in the first few months. And it is planning for enhanced security to control the potentially large crowds and avoid theft of the phones. Some sales agents expect to see people camping outside the night before, the Washington Post reports. More …

USA Today reports that Mac market share in the US, as of May 2007, has reached 7.6%, a significant difference from the 3.2% Apple achieved with the Mac in May 2004. More …

A Security patch

A buffer overflow vulnerability exists in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) code used to create Port Mappings on home NAT gateways in the Apple TV implementation. By sending a maliciously crafted packet, a remote attacker can trigger the overflow which may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue by performing additional validation when processing UPnP protocol packets. Credit to Michael Lynn of Juniper Networks for reporting this issue. More …

The article also includes install instructions

The following improvements apply to both Intel- and PowerPC-based Macs unless otherwise noted:

Bluetooth

• Addresses an issue in which a Bluetooth headset may show up as an available device for sound output in the Sound preference pane after it had been removed from Bluetooth preferences.

Third-party

• Adds RAW image decoding support for the following cameras: Panasonic DMC-LX1, Panasonic DMC-LX2, Leica M8, Leica D-LUX 2, Leica D-LUX 3, Fuji S5 Pro, Nikon D40x, and Canon EOS 1D Mk III.
• Resolves an issue in which some DNG images may appear tinted or distorted.
• Improves compatibility of Mathematica 6 with 64-bit Macs.

USB

• Improves reliability when using the IR remote control after waking from sleep.
• Improves reliability when mounting external USB hard drives.
• Resolves an issue in which a TomTom GO 910 may not be recognized when connected via USB to an Intel-based Mac.

Other

• Improves responsiveness when using the Control-Eject key combination to display a shutdown dialog.
• Addresses a specific issue in which users importing video from a DV camera may experience dropped frames.
• Includes recent Apple security updates.
• Addresses issues with calendar calculations in certain applications.
• Addresses issues when rounding decimal numbers for display in certain applications.
• For Motion, addresses an issue in which some texture corruption could appear in Motion if VRAM is
• More …