Pictures of Pod People

[mr. sparkle]

New iPod Photo has been released. Color screens and stores and plays back photos as well as music. Has an A/V jack for displaying photos on your TV.


SusssweeEET!

New versions of QuickTime and iTunes were also released.

http://www.apple.com/quicktime/download/
http://www.apple.com/itunes/download/

[mr. sparkle]

Also released was the U2: Vertigo iPod Special Edition


It's a beautiful day!

[mr. sparkle]

[Taro Toporific]

Also released was the U2: Vertigo iPod Special Edition
It's a beautiful day!

It's a beautiful day to be 0wned by iPod?

Firewire/IEEE 1394 Considered Harmful to Physical Security


Advisory url: http://pacsec.jp/advisories.html


Summary:
--------
IEEE1394 Specification allows client devices to directly access host
memory, bypassing operating system limitations. A malicious client device
can read and modify sensitive memory, causing privilege escalation,
information leakage and system compromise. Any system with sensitive
information or in an unsecured physical location, esp. public access
systems, should re-evaluate their system security and consider additional
physical security measures if they are equipped with "firewire" ports.
These ports are sometimes also called "iLink" on some Sony models.


Details:
--------
In the presentation, "Owned by an iPod" which Maximilian Dornseif, from Laboratory for Dependable Distributed Systems at RWTH Aachen University, will be giving at the PacSec.jp conference in Tokyo on Nov 11/12, several new techniques involving the IEEE 1394 interface commonly found on laptops, desktops, and some servers will be demonstrated.
These techniques could be used in both malicious and beneficial applications. The beneficial applications are in the areas of system forensics and external debugging. The malicious applications are that anyone with physical access to the firewire port could tamper with system operation and compromise security without measures such as power cycling or rebooting.
Systems that counted on physical access limitation such as blocking access to reset and power switches and other measures to limit compromise though such procedures as rebooting, need to re-examine their security.
As usual, physical access to a computer usually implies the ability for compromise - however, with this new technique, merely plugging in a malicious Firewire/1394 client device with special software could be enough to tamper with a target. It becomes easier to violate security if the combination of physical access and 1394 interfaces is available.
Ê Security policies and procedures should be re-evaluated and consider this new information where needed.

[Watcher]

and only about 6 months behind iRiver... +a tv out support -USB Host funtion so you can download from your digicam. Bah. This ain't so great. I'm waiting to upgrade (both MP3 player and digicam) when Panasonic releases their 32GB SD cards. The proposed date according to their literature is 2007. Will we still be using MP3s in 2007 (about 10 years is the life of any format).