• We have lots of kids downloading lots of apps, and parental controls don't work unless the parents set them up (many don't). So know that we're keeping an eye out for the kids.
• We have over 250,000 apps in the App Store. We don't need any more Fart apps. If your app doesn't do something useful or provide some form of lasting entertainment, it may not be accepted.
• If your App looks like it was cobbled together in a few days, or you're trying to get your first practice App into the store to impress your friends, please brace yourself for rejection. We have lots of serious developers who don't want their quality Apps to be surrounded by amateur hour.
• We will reject Apps for any content or behaviour that we believe is over the line. What line, you ask? Well, as a Supreme Court Justice once said, "I'll know it when I see it". And we think that you will also know it when you cross it.
• If your app is rejected, we have a Review Board that you can appeal to. If you run to the press and trash us, it never helps.
• This is a living document, and new apps presenting new questions may result in new rules at any time. Perhaps your app will trigger this.

The introduction is somewhat surprisingly honest and confirms the fears of many developers. Amateur developers a definitely given the put down. Which is something successful developers will no doubt appreciate. the document is finished of with Apple saying:

"If it sounds like we're control freaks, well, maybe it's because we're so committed to our users and making sure they have a quality experience with our products."

• We have lots of kids downloading lots of apps, and parental controls don't work unless the parents set them up (many don't). So know that we're keeping an eye out for the kids.
• We have over 250,000 apps in the App Store. We don't need any more Fart apps. If your app doesn't do something useful or provide some form of lasting entertainment, it may not be accepted.
• If your App looks like it was cobbled together in a few days, or you're trying to get your first practice App into the store to impress your friends, please brace yourself for rejection. We have lots of serious developers who don't want their quality Apps to be surrounded by amateur hour.
• We will reject Apps for any content or behaviour that we believe is over the line. What line, you ask? Well, as a Supreme Court Justice once said, "I'll know it when I see it". And we think that you will also know it when you cross it.
• If your app is rejected, we have a Review Board that you can appeal to. If you run to the press and trash us, it never helps.
• This is a living document, and new apps presenting new questions may result in new rules at any time. Perhaps your app will trigger this.

The introduction is somewhat surprisingly honest and confirms the fears of many developers. Amateur developers a definitely given the put down. Which is something successful developers will no doubt appreciate. the document is finished of with Apple saying:

"If it sounds like we're control freaks, well, maybe it's because we're so committed to our users and making sure they have a quality experience with our products."

A report on Pocket Lint, a UK tech blog, suggest that Microsoft is holding a lavish launch party in New York on the 11th of October. This is exactly one week after Steve Ballmer is due to hold a special event in London for Windows Phone 7.

Microsoft’s launch plans were originally revealed in early August by Microsoft COO, Kevin Turner. It was confirmed by Turner that WP7 would be available in October for Europe and November for the US. HTC, LG, Samsung , Asus and Del are all expected to launch devices with the Windows Phone 7 platform. Recent FCC filings have revealed a number of devices using WP7 for HTC and Asus, all are expected to arrive at the end of October. The report on pocket Lint confirms it will be soft, meaning the actual devices will follow later.

The Final build of Windows Phone 7 went RTM recently. Microsoft's Corporate Vice President of Windows Phone engineering, Terry Myerson, said: "This has been one of the most incredible product development efforts I’ve ever been a part of". Microsoft have claimed they are “ready”, and the recently published advert come with the tagline "the revolution is coming".

However, Microsoft has not confirmed the date, stating: "We do not comment on rumour or speculation".

A report on Pocket Lint, a UK tech blog, suggest that Microsoft is holding a lavish launch party in New York on the 11th of October. This is exactly one week after Steve Ballmer is due to hold a special event in London for Windows Phone 7.

Microsoft’s launch plans were originally revealed in early August by Microsoft COO, Kevin Turner. It was confirmed by Turner that WP7 would be available in October for Europe and November for the US. HTC, LG, Samsung , Asus and Del are all expected to launch devices with the Windows Phone 7 platform. Recent FCC filings have revealed a number of devices using WP7 for HTC and Asus, all are expected to arrive at the end of October. The report on pocket Lint confirms it will be soft, meaning the actual devices will follow later.

The Final build of Windows Phone 7 went RTM recently. Microsoft's Corporate Vice President of Windows Phone engineering, Terry Myerson, said: "This has been one of the most incredible product development efforts I’ve ever been a part of". Microsoft have claimed they are “ready”, and the recently published advert come with the tagline "the revolution is coming".

However, Microsoft has not confirmed the date, stating: "We do not comment on rumour or speculation".

Symantec have collaborated with rapper Snoop Dogg to raise awareness about malware and identity theft. the site is intended to provide a forum for a rap competition. Users post their own videos of their cyber-crime related raps. A whopping 22 videos have been posted on the site so far.

Apparently this isn’t the first time this kind of thing has happened. HackIsWack has been described as the most comically inept campaign since Don’t Copy that Floppy. Which was a failed rap/security colab from the early 1990s.

The irony of it all is that when the site went live it was riddled with security holes, including a cross site scripting flaw that lent it’s self to the rickrolling attack. Hilarious for us but incredibly embarrassing for the security giant Symantec. A statement was released over the weekend by Symantec, it said the following:

Symantec was made aware of reported vulnerabilities to the Norton Hack is Wack microsite, and we quickly took the necessary steps to enhance security on the site. We have found no evidence to date that any intrusion into the site or other areas of Symantec’s network or website have occurred.

To date, Symantec can confirm that no company or customer data has been compromised or exposed.  Symantec takes the security of our website and microsites very seriously, and we have taken the necessary steps to resolve this issue.

But no clues as to why they went live seriously flawed and untested site. The rickrolling XSS was the most talked about flaw on the site, but security blogger Mike Bailey, has lovingly compiled a list of the multitude of flaws that was present on the site at the time. like the caching of sensitive data and upload security issues, plus more:

Hack is Wack site is chock full of holes. For example, there's the publicly available, indexed cache directory with all that SQL, JSON and other data. There's the XSS vulns (HTML5 only, though it should be simple enough to rewrite), CSRF holes, and the Flash upload issues in the video upload script (a Joomla module that appears to have been used without any quality control or review despite the fact that it's currently in Alpha)

The rickrolling has now gone from the site, and Symantec say they have cleaned up the rest too. So, enjoy!

Symantec have collaborated with rapper Snoop Dogg to raise awareness about malware and identity theft. the site is intended to provide a forum for a rap competition. Users post their own videos of their cyber-crime related raps. A whopping 22 videos have been posted on the site so far.

Apparently this isn’t the first time this kind of thing has happened. HackIsWack has been described as the most comically inept campaign since Don’t Copy that Floppy. Which was a failed rap/security colab from the early 1990s.

The irony of it all is that when the site went live it was riddled with security holes, including a cross site scripting flaw that lent it’s self to the rickrolling attack. Hilarious for us but incredibly embarrassing for the security giant Symantec. A statement was released over the weekend by Symantec, it said the following:

Symantec was made aware of reported vulnerabilities to the Norton Hack is Wack microsite, and we quickly took the necessary steps to enhance security on the site. We have found no evidence to date that any intrusion into the site or other areas of Symantec’s network or website have occurred.

To date, Symantec can confirm that no company or customer data has been compromised or exposed.  Symantec takes the security of our website and microsites very seriously, and we have taken the necessary steps to resolve this issue.

But no clues as to why they went live seriously flawed and untested site. The rickrolling XSS was the most talked about flaw on the site, but security blogger Mike Bailey, has lovingly compiled a list of the multitude of flaws that was present on the site at the time. like the caching of sensitive data and upload security issues, plus more:

Hack is Wack site is chock full of holes. For example, there's the publicly available, indexed cache directory with all that SQL, JSON and other data. There's the XSS vulns (HTML5 only, though it should be simple enough to rewrite), CSRF holes, and the Flash upload issues in the video upload script (a Joomla module that appears to have been used without any quality control or review despite the fact that it's currently in Alpha)

The rickrolling has now gone from the site, and Symantec say they have cleaned up the rest too. So, enjoy!

Ping was announced last Wednesday at Apple’s special event as part of iTunes latest update 10.0. Ping is a social network based around what music users are buying from the iTunes Store. Much like Facebook users add their friends and comment on their own or others purchases. A custom music chart is built on a users circle of friends.

iTunes is already run by more than 160 million users, so it’s no surprise that they broke the one million mark in 48 hours. Apple have revealed that one third of those that have downloaded iTunes 10.0 have signed up to Ping. Apple’s vice president of Internet Services, Eddy Cue said the following: “One-third of the people who have downloaded iTunes 10 have joined Ping. As many more people download iTunes 10 in the coming weeks, we expect the Ping community to continue growing.“

Apple is happy with the uptake for Ping, but some are a little surprised that the number isn’t much higher considering how many people use iTunes.

Ping was announced last Wednesday at Apple’s special event as part of iTunes latest update 10.0. Ping is a social network based around what music users are buying from the iTunes Store. Much like Facebook users add their friends and comment on their own or others purchases. A custom music chart is built on a users circle of friends.

iTunes is already run by more than 160 million users, so it’s no surprise that they broke the one million mark in 48 hours. Apple have revealed that one third of those that have downloaded iTunes 10.0 have signed up to Ping. Apple’s vice president of Internet Services, Eddy Cue said the following: “One-third of the people who have downloaded iTunes 10 have joined Ping. As many more people download iTunes 10 in the coming weeks, we expect the Ping community to continue growing.“

Apple is happy with the uptake for Ping, but some are a little surprised that the number isn’t much higher considering how many people use iTunes.

• Organize your music into playlists
• Edit file information
• Record compact discs
• Copy files to an iPod or other digital audio player
• Purchase music and videos on the Internet through the built-in iTunes store
• Run a visualizer to display graphical effects in time to the music
• Encode music into a number of different audio formats.

Updates

• Adds new social networking layer named "Ping".
• Adds support for iPod shuffle 4G, iPod nano 6G, iPod touch 4G, and Apple TV (late 2010).
• Renamed AirTunes to AirPlay.
• Adds visual improvements to list view.
• Improves performance.
• Adds additional support for VoiceOver Kit for iPod.
• Changes application icon.

• Organize your music into playlists
• Edit file information
• Record compact discs
• Copy files to an iPod or other digital audio player
• Purchase music and videos on the Internet through the built-in iTunes store
• Run a visualizer to display graphical effects in time to the music
• Encode music into a number of different audio formats.

Updates

• Adds new social networking layer named "Ping".
• Adds support for iPod shuffle 4G, iPod nano 6G, iPod touch 4G, and Apple TV (late 2010).
• Renamed AirTunes to AirPlay.
• Adds visual improvements to list view.
• Improves performance.
• Adds additional support for VoiceOver Kit for iPod.
• Changes application icon.

It’s easy to register, select “Ping” from the sidebar in iTunes, log in with your iTunes account, and set up a profile. Once a profile is set up it seems to auto populate with some of the music that has been recently purchased and you get the chance to “like” that music. the auto population seems to be pretty random and not based on most played etc.

After you’ve done that you’re presented with a “welcome to Ping” screen, and given three options: “Search for People or Artists”, “Invite Your Friends by Email”, and “Connect iTunes Ping with Facebook.” Ping allows you to follow either artists or people. The Facebook connection is best for finding friends on ping, and the “Artists We Recommend You Follow” for artists. Again, it’s still early days so don’t expect to see much.

Recent Activity offers a feed much like Facebook’s news feed, but it’s all music related. You can see who’s following who and what’s been purchased with the option to make that purchase as well.

The main difference with Ping is that it’s tied to iTunes, which is a different approach to social networks. One that Microsoft has previously tried with Zune Social, it didn’t really work. Online, in browser access is the key to the success of social networks. But there’s no sign of that happening. Deeper integration with Facebook would be a way to do it perhaps.

Ping isn’t active on the iPad, iPhone or iPod touch yet, but should be going live in the not too distant future.

Whether Ping will become the successful social network Apple want it to be is yet to be seen. Some have already labelled it a “MySpace killer”. It could be a great way of sharing your music tastes with your friends, if your friends are using it.

It’s easy to register, select “Ping” from the sidebar in iTunes, log in with your iTunes account, and set up a profile. Once a profile is set up it seems to auto populate with some of the music that has been recently purchased and you get the chance to “like” that music. the auto population seems to be pretty random and not based on most played etc.

After you’ve done that you’re presented with a “welcome to Ping” screen, and given three options: “Search for People or Artists”, “Invite Your Friends by Email”, and “Connect iTunes Ping with Facebook.” Ping allows you to follow either artists or people. The Facebook connection is best for finding friends on ping, and the “Artists We Recommend You Follow” for artists. Again, it’s still early days so don’t expect to see much.

Recent Activity offers a feed much like Facebook’s news feed, but it’s all music related. You can see who’s following who and what’s been purchased with the option to make that purchase as well.

The main difference with Ping is that it’s tied to iTunes, which is a different approach to social networks. One that Microsoft has previously tried with Zune Social, it didn’t really work. Online, in browser access is the key to the success of social networks. But there’s no sign of that happening. Deeper integration with Facebook would be a way to do it perhaps.

Ping isn’t active on the iPad, iPhone or iPod touch yet, but should be going live in the not too distant future.

Whether Ping will become the successful social network Apple want it to be is yet to be seen. Some have already labelled it a “MySpace killer”. It could be a great way of sharing your music tastes with your friends, if your friends are using it.

The Fixit only woks on machines that have installed the workaround published by Microsoft last week. The Fixit is intended to make the previous work around easier to use. Allowing the fine tuning of a number of settings that will ensure compatibility with applications.

The DLL hijacking threat derives from Windows default behaviour when loading dynamic link library files for applications running on top of the OS. If an attacker can set the current working directory to one controlled by them, it’s then possible for them to force the OS to run a malicious file. Applications that have been identified as being vulnerable include Mozilla Firefox, Thunderbird, PowerPoint, Outlook 2002, Opera and Nvidia graphics hardware.

Mozilla have not yet commented on the situation, nor have Microsoft confirmed which of it’s application are vulnerable.

Jonathan Ness and Maarten Van Horenbeeck of MSRC have confirmed that the vulnerability doesn’t allow drive by attacks via malicious websites, but is nonetheless a real threat. Particularly for those working with Windows file sharing and other advanced networking options. The pair wrote:

“Unfortunately, based on attack patterns we have seen in recent years, we believe it is no longer safe to browse to a malicious, untrusted WebDAV server in the Internet Zone and double-click on any type of files. We recommend users only double-click on file icons from WebDAV shares known to be trusted, safe, and not under the control of a malicious attacker.”

The Fixit only woks on machines that have installed the workaround published by Microsoft last week. The Fixit is intended to make the previous work around easier to use. Allowing the fine tuning of a number of settings that will ensure compatibility with applications.

The DLL hijacking threat derives from Windows default behaviour when loading dynamic link library files for applications running on top of the OS. If an attacker can set the current working directory to one controlled by them, it’s then possible for them to force the OS to run a malicious file. Applications that have been identified as being vulnerable include Mozilla Firefox, Thunderbird, PowerPoint, Outlook 2002, Opera and Nvidia graphics hardware.

Mozilla have not yet commented on the situation, nor have Microsoft confirmed which of it’s application are vulnerable.

Jonathan Ness and Maarten Van Horenbeeck of MSRC have confirmed that the vulnerability doesn’t allow drive by attacks via malicious websites, but is nonetheless a real threat. Particularly for those working with Windows file sharing and other advanced networking options. The pair wrote:

“Unfortunately, based on attack patterns we have seen in recent years, we believe it is no longer safe to browse to a malicious, untrusted WebDAV server in the Internet Zone and double-click on any type of files. We recommend users only double-click on file icons from WebDAV shares known to be trusted, safe, and not under the control of a malicious attacker.”

The cyber-jihadis of Dz-seC, a previously unknown group, commandeers the website of Belvoir Castle in order to post and an anti-Zionist rant and an image of the Algerian national flag.

Belvoir Fortress in Israel was a Christian outpost in the time of the crusades, Belvoir castle was a Royalist stronghold during the English civil war. and these days is best know for it’s annual teddy bears’ picnic.

a Belvoir Castle spokesman, when speaking with the daily telegraph: “We've nothing to do with the Middle-East, I just help to organise the teddy bears' picnic. It does make more sense that they meant to target the fortress in Israel rather than the castle in Leicestershire.”

Belvoir Castle’s website has since been restored since the attack of the geographically misguided jihadists.

The cyber-jihadis of Dz-seC, a previously unknown group, commandeers the website of Belvoir Castle in order to post and an anti-Zionist rant and an image of the Algerian national flag.

Belvoir Fortress in Israel was a Christian outpost in the time of the crusades, Belvoir castle was a Royalist stronghold during the English civil war. and these days is best know for it’s annual teddy bears’ picnic.

a Belvoir Castle spokesman, when speaking with the daily telegraph: “We've nothing to do with the Middle-East, I just help to organise the teddy bears' picnic. It does make more sense that they meant to target the fortress in Israel rather than the castle in Leicestershire.”

Belvoir Castle’s website has since been restored since the attack of the geographically misguided jihadists.

Microsoft's hardware and carrier partners have received the final build and code so that they can integrate their own software and services before devices are shipped later this year. There have however, been several last minute changes to the platform:

Windows Phone 7 has to be the most thoroughly tested mobile platform to come out of Redmond. Microsoft say that they had nearly 10,000 devices running daily automated tests, 0.5 million hours of active self-hosting use, over 3.5 million hours of stress test passes and a whopping 8.5 million hours of fully automated test passes. Added to all that Microsoft have had thousands of early adopters and independent software vendors testing WP7 and giving feedback.

Microsoft's Corporate Vice President of Windows Phone engineering, Terry Myerson said:

"We are ready. This has been one of the most incredible product development efforts I’ve ever been a part of. Today’s milestone is exciting not just because of what we’ll deliver to customers later this year, but how it sets us up for success over the long term in the mobile space… we’re really just getting started."

Windows Phone 7 is expected to drop in October for Europe and November for the US.

Microsoft's hardware and carrier partners have received the final build and code so that they can integrate their own software and services before devices are shipped later this year. There have however, been several last minute changes to the platform:

Windows Phone 7 has to be the most thoroughly tested mobile platform to come out of Redmond. Microsoft say that they had nearly 10,000 devices running daily automated tests, 0.5 million hours of active self-hosting use, over 3.5 million hours of stress test passes and a whopping 8.5 million hours of fully automated test passes. Added to all that Microsoft have had thousands of early adopters and independent software vendors testing WP7 and giving feedback.

Microsoft's Corporate Vice President of Windows Phone engineering, Terry Myerson said:

"We are ready. This has been one of the most incredible product development efforts I’ve ever been a part of. Today’s milestone is exciting not just because of what we’ll deliver to customers later this year, but how it sets us up for success over the long term in the mobile space… we’re really just getting started."

Windows Phone 7 is expected to drop in October for Europe and November for the US.

The new Apple TV box is much smaller than it’s predecessor, less than a quarter of the size. The little box comes loaded with features and accessories, including WiFi, HDMI, Optical audio, and an Ethernet port. users will be able to stream HD video, no syncing, with a photo slide show. The remote looks some what like a tall iPod Shuffle, it makes navigating through menus quick and easy. So you can browse movies, TV, music and podcasts with minimal effort.

HD TV shows have been priced at $0.99 per rental by Apple, with shows from ABC, FOX and soon Hollywood Studios. HD movies can be streamed for $4.99 and user will be able to stream YouTube, Flicker, Netflix and MobileMe also.

The UI introduced with Apple TV is unlike anything they’ve ever done before. Ratings and reviews from a variety of different sources such as actors and directors are included. User can stream media from their iOS devices like the iPad straight to the Apple TV box. But this won’t be available until November when iOS 4.2 is rolled out.

Apple TV will retail for $99 in the US, and will be available in the UK, Canada France, Germany and Australia. It’s just 4 weeks until the launch, and you can pre-order today.

The new Apple TV box is much smaller than it’s predecessor, less than a quarter of the size. The little box comes loaded with features and accessories, including WiFi, HDMI, Optical audio, and an Ethernet port. users will be able to stream HD video, no syncing, with a photo slide show. The remote looks some what like a tall iPod Shuffle, it makes navigating through menus quick and easy. So you can browse movies, TV, music and podcasts with minimal effort.

HD TV shows have been priced at $0.99 per rental by Apple, with shows from ABC, FOX and soon Hollywood Studios. HD movies can be streamed for $4.99 and user will be able to stream YouTube, Flicker, Netflix and MobileMe also.

The UI introduced with Apple TV is unlike anything they’ve ever done before. Ratings and reviews from a variety of different sources such as actors and directors are included. User can stream media from their iOS devices like the iPad straight to the Apple TV box. But this won’t be available until November when iOS 4.2 is rolled out.

Apple TV will retail for $99 in the US, and will be available in the UK, Canada France, Germany and Australia. It’s just 4 weeks until the launch, and you can pre-order today.