Following up on the iPhone OS 3.0 mail bug in which the act of deleting an e-mail within iPhone OS 3.0 isn’t enough to destroy its contents, Apple is reportedly aware of the flaw and could be working on a fix.
According to Gizmodo, a source close to the story has stated that the fix will likely come in iPhone OS 3.1 for the iPhone and iPod touch. The problem, occurs when a user attempts to delete an e-mail. Even after emptying the Mail application’s trash, the message, and all of its contents, are still accessible through the phone’s Spotlight search feature.
To test the flaw, delete a message within the iPhone’s Mail software. Remove it from the trash, and check your mail server to ensure it’s erased. Then, search for the subject line of the message in Spotlight, where, in many cases, the entire message can still be read.
“As far as I can tell, there is no way to completely delete emails from iPhone OS 3.0, which isn’t just strange, it’s a disastrous security flaw,” John Herrman writes for Gizmodo.
The site’s internal tipster doesn’t give any certainty, though, only saying Apple will “probably” include a fix in the upcoming iPhone OS update.
A significant security hole in iPhone OS 3.0 may have surfaced, as a recently published YouTube video demonstrates how the Spotlight search cache doesn’t sync message status with the mail client, so you can still pull up old messages with Spotlight if you know the subject line. According to Engadget, user Matt Janssen, who discovered the bug, says he’s been able to pull up emails three or four months old. Current rumors state that the bug is fixed in iPhone OS 3.1, but until then, here’s the video:
On Wednesday, software company Delicious Monster released version 2.2 of the shareware favorite, Delicious Library. Delicious Monster allows Macs with webcams to scan the bar codes of any book, movie, music CD or video game, then creates an archive based on background information from the Internet. Additional features help keep the library organized and reseller’s tools allow for items to be quickly posted for sale online.
The new version, a 15.8 megabyte download, incorporates significant fixes and changes, the full list of which can be found here.
Delicious Library 2.2 retails for US$40 and requires Mac OS X 10.5 or later to install and run.
Video Lan Client, the nigh-indispensable open source media player for multiple audio and video formats (MPEG, MPEG-2, MPEG-4, Divx, ogg, etc.), was updated to version 1.0.1 on Tuesday. The new version, a 28.7 megabyte download, adds the following fixes and changes:
* Flv and mpeg2 seeking.
* Wmv, wav, rtsp and ssa support.
* Fixes for Qt and MacOS interface.
* Fix of an integer underflow in Real pseudo-RTSP module.
* Translations updates.
* Port of the ZVBI module to Windows for full teletext support.
* Codecs updates for Windows and Mac OS.
VLC 1.0.1 requires Mac OS X 10.5 or later to install and run and is available as a free download.
Late Monday, the Perian team released version 1.1.4 of Perian, the open-source QuickTime components effort that allows QuickTime to support and play a variety of additional formats beyond what it would normally be able to handle.
The new version makes the following fixes and changes:
* Forced VobSub subtitles are imported into a separate track.
* Added initial DTS passthrough via similar mechanisms as AC3.
* Support old ffmpeg-generated MKV files with no enabled tracks.
* 10.6-compatible preference pane.
* Fixed “Load External Subtitles” checkbox.
* Fixed crash/freeze when loading broken VobSub subtitles.
* Fixed import of uncompressed audio in FLV.
* Fixed import of some audio tracks; should improve iApps.
* Fixed CRAM codec AVI in browsers.
* Worked around bug in iChat codec loading.
* Never allows Apple’s code to handle AC3 data anymore so passthrough works more often.
* Doesn’t try to decode some RGB colorspaces (such as in Camtasia) that aren’t supported.
* Fixed some 16-bit RGB codecs on Intel.
* Fixed importing movie files with no video tracks (regression from r706).
* Fixed H264 crash in put_h264_qpel8_h_lowpass_l2_ssse3 (in FFmpeg).
* Fixed crash with corrupt first frame.
* Fixed BMP/RLE in AVI.
* Fixed several memory leaks.
* Fixed a problem with wrong channel order in DTS 5.1.
* Fixed possible conflict with UniversalDetector.framework.
* Fixed garbage characters appearing at the end of a line with some fonts.
* Better handling of invalid SSA files.
* Fixed rendering of multi-layer subtitles.
* Fixed SRT files using ‘,’ for decimals.
* Ignored SSA shapes and blur instead of misparsing them.
* Disabled vertical font support again to fix files wrongly using it for Latin text.
* Fixed subtitles in MKV wrongly displaying at the end of a video.
* Better handling of move and org.
Perian is a 3.6 megabyte download and requires Mac OS X 10.4 or later to run.
A number of Cox internet service members have been having trouble accessing their e-mail accounts through Apple’s Mail program. Per MacFixIt, the connection seems to be fine and log-in works, but while Mail will show downloaded messages in the “Activity” window, they will not show up in an in-box. Additionally, a message of “mail cannot verify the identity of pop.central.cox.net” may appear.
The issue may have arisen from a recent update of the Cox e-mail servers that is contributing to this problem, since it seems to have cropped up in the past few days. Other (such as those discussing the issue in this Apple discussion thread) have claimed this happening for a few weeks. According to Cox, its e-mail servers seem to be fine, but the problem persists for affected members.
Some users have found that turning off SSL authentication for their e-mail accounts has helped the problem, which can be done in the “Advanced” section of the accounts settings in the preferences. To have Mail work continually you may need to toggle the SSL setting periodically, but this has helped a few people experiencing problems.
One workaround to at least accessing your mail is to use the Cox Web mail program, which can be found at http://webmail.cox.net.
On Monday, Microsoft released updates for its Microsoft Office 2008 suite as well as its Open XML Converter applications.
The Office 2008 update (which functions as a second service pack), is a 297 megabyte download that offers the following fixes and changes with a full description of the changes available here:
Stability is improved: This update fixes an issue that causes Office 2008 applications to exit unexpectedly when you open or use the applications.
Setup Assistant displays a message when an invalid product key is used: This update fixes an issue that causes Setup Assistant to loop when the user enters an invalid product key. The Setup Assistant now displays a message and asks the user to enter a valid product key.
Spell checking is improved when International System Preferences is set to Austrian or German input methods: This update fixes an issue in which the spell checking feature is disabled intermittently for Austrian and German languages.
Text box and the custom tab stops on a ruler align on a PowerPoint slide: This update fixes an issue that causes the text box and the tab stops on the ruler not to line up appropriately.
New controls for changing the alignment of text on chart elements: This update includes new controls for setting the vertical position, orientation, and custom angle of text in chart elements. It also includes controls for data label positions.
Improvements for Microsoft Word 2008 for Mac: Stability is improved when you use Mail Merge with pictures.
This update fixes an issue that causes Word to crash when you use the Mail Merge Manager to insert a record with pictures from an external data source into your main document.
Notebook Layout View recovers audio notes after Word closes unexpectedly: This update fixes an issue that causes users to lose their audio notes when Word closes unexpectedly. When you restart Word, the AutoRecover file does not include the audio notes. This issue is fixed now.
Performance is improved: This update fixes performance issues that occur in the following scenarios:
When you use the Outline View.
When you use Japanese characters and the Formatting Palette Styles functionality.
Section indicator is included in the Word status bar: This update reintroduces the Section indicator to the status bar. The Section indicator provides the section number that you are currently viewing in your document.
Reliability is improved with display redraw issues: This update fixes various display redraw issues that might occur when you scroll through a document that contain bullets and numbering.
Compatibility with Word 2007 is improved: This update fixes an issue that causes a Word 2007 document that has table borders not to be displayed correctly when the document is viewed in Word 2008 for Mac.
Reliability is improved when you copy a numbered list: This update fixes an issue that causes a numbered list to lose its formatting when it is copied into another document.
Improved editing when you use Korean characters: This update fixes an issue that causes Korean characters in a document to display incorrectly when you press the arrow keys.
Compatibility is improved with SpellCatcher X: This update fixes an issue that improves compatibility with SpellCatcher X.
Microsoft Office 2008 12.2.0 requires Mac OS X 10.4.5 or later to install and run.
Per the Open XML Converter 1.1 update, Microsoft released the 44.7 megabyte updater file for download. The new version of the utility (which lets you convert Open XML files that were created in Microsoft Office 2008 for Mac or 2007 Microsoft Office for Windows so that you can open, edit, and save them in earlier versions of Office for Mac) boasts currently unspecified fixes and changes.
The application requires Mac OS X 10.4 or later to and Microsoft Office X 10.1.9 or Microsoft Office 2004 11.4.0 or later to install and run.
Both updates can be located and installed with the Microsoft AutoUpdater application.