http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/ Engadget Comments for http://www.engadget.com/media/feedlogo.gif http://www.engadget.com en-us Copyright 2008 Weblogs, Inc. The contents of this feed are available for non-commercial use only. Blogsmith http://www.blogsmith.com/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:19PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 9:03PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Aug 1st 2007 4:53AMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:19PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Aug 1st 2007 8:31AMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Aug 1st 2007 10:43AMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:20PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:21PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Aug 2nd 2007 2:03AMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:21PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:25PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Hey Apple, give us some new features instead of JUST bug fixes (like Sony with the PSP...)]]>Jul 31st 2007 8:30PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/
I hope it is doesn't mess up my ringtones (how lame does that sound) - I can't go back to those lame default ringtones. I need my White Stripes! Thanks iFuntastic!

]]>Jul 31st 2007 8:26PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:26PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:27PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:30PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 9:06PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:28PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:28PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:29PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:29PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:31PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/]]>Jul 31st 2007 9:32PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:31PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Does it work?!]]>Jul 31st 2007 8:32PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 11:45PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:32PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:40PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:34PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:34PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:34PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:34PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/
"vague comparison here"
That’s like when Microsoft release Windows 95 to the public with out anybody beta testing it. Then small minor updates, Win 95a, Win95b etc... Then m$oft release the REAL product Windows 98! Of course by that time people got smart and starting to demand beta testing! This is almost like some sort of pre-Aprils fools joke? Seriously!
]]>Aug 1st 2007 10:13AMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Aug 11th 2007 12:01PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:35PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/I also noticed that scrolling is still terribly unresponsive while a page is loading.

Does anyone else have the issue where (iPhone) safari will load about 90% of a page and then just sit there "forever"?]]>Jul 31st 2007 8:37PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:46PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 10:15PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/This document describes the security content of iPhone v1.0.1 Update, which can be downloaded and installed via iTunes as described below.

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.

For information about the Apple Product Security PGP Key, see "How to use the Apple Product Security PGP Key."

Where possible, CVE IDs are used to reference the vulnerabilities for further information.

To learn about other Security Updates, see "Apple Security Updates."

iPhone v1.0.1 Update

Safari

CVE-ID: CVE-2007-2400

Available for: iPhone v1.0

Impact: Visiting a malicious website may allow cross-site scripting

Description: Safari's security model prevents JavaScript in remote web pages from modifying pages outside of their domain. A race condition in page updating combined with HTTP redirection may allow JavaScript from one page to modify a redirected page. This could allow cookies and pages to be read or arbitrarily modified. This update addresses the issue by correcting access control to window properties. Credit to Lawrence Lai, Stan Switzer, and Ed Rowe of Adobe Systems, Inc. for reporting this issue.

Safari

CVE-ID: CVE-2007-3944

Available for: iPhone v1.0

Impact: Viewing a maliciously crafted web page may lead to arbitrary code execution

Description: Heap buffer overflows exist in the Perl Compatible Regular Expressions (PCRE) library used by the JavaScript engine in Safari. By enticing a user to visit a maliciously crafted web page, an attacker may trigger the issue, which may lead to arbitrary code execution. This update addresses the issue by performing additional validation of JavaScript regular expressions. Credit to Charlie Miller and Jake Honoroff of Independent Security Evaluators for reporting these issues.

WebCore

CVE-ID: CVE-2007-2401

Available for: iPhone v1.0

Impact: Visiting a malicious website may allow cross-site requests

Description: An HTTP injection issue exists in XMLHttpRequest when serializing headers into an HTTP request. By enticing a user to visit a maliciously crafted web page, an attacker could trigger a cross-site scripting issue. This update addresses the issue by performing additional validation of header parameters. Credit to Richard Moore of Westpoint Ltd. for reporting this issue.

WebKit

CVE-ID: CVE-2007-3742

Available for: iPhone v1.0

Impact: Look-alike characters in a URL could be used to masquerade a website

Description: The International Domain Name (IDN) support and Unicode fonts embedded in Safari could be used to create a URL which contains look-alike characters. These could be used in a malicious web site to direct the user to a spoofed site that visually appears to be a legitimate domain. This update addresses the issue by through an improved domain name validity check.

WebKit

CVE-ID: CVE-2007-2399

Available for: iPhone v1.0

Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution

Description: An invalid type conversion when rendering frame sets could lead to memory corruption. Visiting a maliciously crafted web page may lead to an unexpected application termination or arbitrary code execution. Credit to Rhys Kidd of Westnet for reporting this issue.

Installation note

This update is only available through iTunes, and will not appear in your computer's Software Update application, or on the Apple Support Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from (www.apple.com/itunes).

iTunes automatically checks Apple's update server on its weekly schedule. When an update is detected, it will download it. When the iPhone is docked, iTunes will present the user with the option to install the update. We recommend applying the update immediately if possible. Selecting "don't install" will present the option the next time you connect your iPhone. The automatic update process may take up to a week depending on the day that iTunes checks for updates.

You can manually obtain the update via the "Check for Updates" button or menu choice in iTunes. After doing this, the update can be applied when your iPhone is docked to your computer.

To check that the iPhone has been updated:

Navigate to Settings on the iPhone.
Click General.
Click About. The version after applying this update will be "1.0.1 (1C25)".]]>Jul 31st 2007 8:39PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/
http://docs.info.apple.com/article.html?artnum=306173

But the above document does not make it clear if there's anything else (non-security stuff) that's new in this update.

Time will tell, I'm sure...]]>Jul 31st 2007 8:40PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Jul 31st 2007 8:41PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/This is a "Bug Fixer"
I think Apple did this just to remind people that
this is the new era for Cellphone updates. Where if something is not
working right Apple will try to help with Software updates.
I think this is a great start for being Apple's First phone.
And I'm so proud to be an iPhone owner!]]>Jul 31st 2007 8:41PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/
But... maybe it's a new era in terms of how accessible firmware updates for phones are. Is that what you meant?]]>Jul 31st 2007 8:53PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/that Apple's new Phone will be easier to manage rather than having the cellphone company make a "massive" update to the network or cellphone itself (I don't know how that is managed)
BUt I think apple is great on how they manage their updates.
So this adds more reliability to the cellphone and the company just because if anything needs to be changed on an application or anything like that Apple can add it without a problem...
Makes sense, at all?]]>Jul 31st 2007 8:58PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/
However even as an iPhone hater I am impressed by the ease on which this patch was applied.]]>Jul 31st 2007 9:05PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/
If you're a hater, why are you here reading about the object of your disdain? Get a life, man.
_________________

Sure, firmware updates have been available on other devices since the beginning of time, but were they routinely applied. Phone nerds scouring Howard Forums apply patches... Even look forward to them. But does your dad? Your sister?

With iPhone, every user will get the prompt when syncing and I'm guessing most will walk through the super-easy process... And have a better device for it.

Don't pretend every Tom, Dick & Harry is out there hooking up a USB cable to his RAZR. He's not.]]>Jul 31st 2007 11:20PMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/
If you think people still look at forums for patches you need to learn. For a year now all we need to do is plug our phones in and fire up the update manager or just download patches over the air.]]>Aug 1st 2007 12:11AMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Aug 1st 2007 12:54AMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/
Dude... Either you have issues or your just upset because you couldn't afford an iPhone.

Hum... maybe both?]]>Aug 1st 2007 10:22AMhttp://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/http://www.engadget.com/2007/07/31/apple-iphone-update-1-0-1-released/Aug 1st 2007 2:57PM