The Unofficial Apple Weblog (TUAW)

Yep, the Apple Store is down (all over, it seems) and our inboxes runneth over. Don't get too excited, however. This has happened before and will happen again. And again. And again. And again.

If you see anything new when it comes back online, be a dear and leave it in the comments.

UPDATE: Store is back up with holiday cheer. And there was much rejoicing.

thanks to everyone who sent this in!

For the last few days, some jailbroken iPhone users have found their home screen background a little different than they remembered. A hacker, going by the name "ikee," created a worm that changes the home screen background on jailbroken iPhones whose owners failed to change the default password after installing SSH. Simply jailbreaking your iPhone will not make you vulnerable to this sort of hack. The iPhone OS, in general, is also immune to this hack. Still confused? Let's back up a bit.

On jailbroken iPhones, SSH is installable with a package from Cydia that allows you to connect to your phone and make changes to the filesystem. It does this by logging into the root user with the password "alpine." After installing SSH, it is always recommended that you change "alpine" to the password of your choosing. This hack can only affect people who chose not to change that password -- no one else.

This hack originated in Australia, the home country of ikee, and has possibly spread to other iPhones in other countries, but we've been unable to verify that. A gentleman by the name of JD held an interview with the hacker over IRC and posted it to his blog. In ikee's own words, here's how the worm has spread:

...The code itself is set to firstly scan the 3G IP range the phone is on, then Optus/Vodafone/Telstra's IP Ranges (I think the reason Optus got hit so hard is because the other 2 are NAT'd) then a random 20 IP ranges. I'm guessing a few phones hit a range that another vulnerable phone was on.

Basically, once your phone is infected, the worm starts looking for other iPhones on the cellular network that use the root:alpine combination. Once it finds another vulnerable iPhone, it installs itself and begins the process again... and again... and again.

Luckily for the jailbreakers in the audience who may have been affected, there's really no harm done -- at least not with this version of the worm. According to the hacker, this was more of an experiment than anything else. The worm changes your background and then disables inbound SSH, which is a good thing. If SSH was left turned on, a similar worm could follow along but conceivably do much more damage. For instructions on how to delete this worm, read JD's interview with ikee. I would recommend reading the interview just for the information it presents; I found it pretty interesting. If you've got a jailbroken iPhone or iPod touch and you've never changed the default device password, now's the time. Here's how, if you are using terminal:

Type: ssh root@(iPhone IP address)
When prompted for the password type: alpine
Now you're connected the phone...
type: passwd
It should then prompt your for a new password -- type one that you'll remember. There's no easy way to reset it if you forget it.

That's it. Please remember to be responsibly secure with your devices. Hackers like ikee are troublesome, but this could have been much worse. While I don't personally condone his actions, he's prevented a lot of people from being vulnerable to more malicious attacks later down the road.

Thanks, James!

We've heard a few reports of sync issues with the new Apple TV 3.0 software over the past few days, and apparently the chatter on the Apple support boards was on the mark: Apple has shipped 3.0.1, which is supposed to fix problems where 3.0 units would unexpectedly dump all their loaded content. You can get all the details from Apple's tech note. [According to our commenters, in most cases the content was not gone, simply invisible; a reboot of the ATV might bring back the media.]

Since it's a giant pain to resync gigabytes of media over the network link, it's nice to see this fixed promptly.... but considering that the Apple TV 3.0 update was billed as a major improvement to Apple's 'hobby,' this bug is not going to make any fans out of Apple TV foes.

Thanks to everyone who sent this in.

Several readers have urged me to try the Gokivo Navigator for the iPhone [iTunes link], so today is the day. The app is U.S. $4.99, but that only provides you with GPS navigation for 30 days. After that, the app costs $4.99 monthly or you can purchase a year of service for $39.99. That's quite a bit less that the AT&T nav solution [iTunes link], and makes the Gokivo app quite competitive. The app includes a Traffic Tracking Center, text to speech so street names are announced as you drive, and it has iPod controls so you don't have to leave the app to change your music.

Like the AT&T app, if you are out of range of the data network, you won't get maps. And like most of the competition, Gokivo gives you an estimated time of arrival, distance to your destination, and your current speed.

The map doesn't work in landscape view, which I consider a strong negative. It's easy to navigate to your addresses in your Contacts app, and the feature is nicely integrated.

Read more →

As Dave Caolo told TUAW readers a few days ago, Fortune named Apple CEO Steve Jobs "CEO of the Decade" for his phenomenal leadership at Apple and how he has remade four industries (music, movies, mobile telephones, and computing) in the past ten years.

Part of the Fortune article was a collection of rarely seen photographs of Steve Jobs. From the early days with Steve Wozniak, to his recent battles with pancreatic cancer, the photos chronicle the life of the iconic CEO.

Two of my personal favorites in the gallery are a photo taken in 1982 of Jobs and the Mac team having a working lunch as they hammer out the design of the first-generation Mac, and another of a barefoot Jobs meeting with Bill Gates at the Jobs home in Palo Alto to talk about the future of computing for Fortune.

The entire set of posts, along with the photos and video, are a fascinating look into the many successes and few failures of the engimatic Mr. Jobs. If you have a chance, take a look at it this weekend.

Apple, being the innovative corporation that it is, applies for patents many times per year. While many of these items may never make it to market, the company is proactive in making sure that possible patents are filed as soon as possible in order to protect the intellectual property that's been developed.

One such filing from last year describes a fascinating cloud-based, cross-platform sync service referred to as "Grab & Go." The filing showed up earlier this week and demonstrates how synchronization of data over multiple devices could be simplified. Grab & Go creates pre-defined data sets with categories like family, entertainment, or business that a user could literally "grab" and move to a device. The patent document shows how sharing files between devices (whether the device is a smartphone, computer, tablet, or even a game console) could be made easier.

The software is flexible enough to adapt to different connection types (Bluetooth, Wi-Fi, Ethernet, to name a few) and can provide different levels of encryption and security. The filing even discusses a possible requirement of having two or more devices within a certain distance of each other in order for synchronization to begin.

If you're up for a long, but interesting read over the weekend, head on over to the US Patent & Trademark Office and check out the details of Grab & Go. It could be a foretaste of things to come, or just another long legal document.

[via AppleInsider and Engadget]

Bambooapps has released a simple and useful utility called Quiet Read that has earned a spot on my Mac's menubar. With a simple drag-and-drop, it lets you save a web page for later review.

Of course, there are many apps that do this, including Instapaper and Evernote. Instapaper gets the job done via a bookmarklet; just give it a click while at the desired URL and it's saved. Evernote does pretty much the same thing, thought their bookmarklet behaves differently between Safari and Firefox. In addition, they have the Mac application for tagging and organizing.

I spent the day using Quiet Read instead of the other two. Here's what I liked and disliked. First, adding a URL is as easy as possible. Simply drag it out of your browser's address bar and drop it onto the menu bar icon. The display keeps track of how many you've collected. A tidy drop-down lets your browse the saved articles for easy selection.

What I disliked is that once an app is gone, it's gone. Instapaper saves read articles.

But Quiet Read isn't Instapaper. If you're looking for a free, simple way to save articles for later reading (and you're running 10.6 or later), Quiet Read could be the solution.

As a guy who likes shopping online, but who still appreciates the act of going into a retail store for big purchases, I love this news. Apple has introduced a "Reserve and Pick-up" service for the holiday season.

The name is a little unwieldy, but it gets the point across. You go onto the Apple web site to find what you want, click to reserve the product at a nearby Apple Store, and then go to the store and pick up the goods while you're doing your holiday shopping between December 15 to 24.

For many folks, this might seem awkward -- why not just buy the product online and get it shipped, or just go to the store and buy it? For guys like me, it's perfect -- all of the convenience of choosing a product online, with the added bonus of being able to check out the retail store during the holidays.

iLounge notes that there's no AppleTV on the list, so if you were planning to pick one up as a gift, you'll have to go a more traditional route. There's also no way to actually reserve an iPhone. Instead, you're told to get an iPhone gift card to give to some lucky recipient. Nevertheless, I like the idea of reserve and pick-up, an interesting mix of online shopping and in-store purchasing for the holiday season. It's Apple take-out.

Want an iPhone app business without all the boring hassle of actually programming and releasing iPhone apps? Boy, does Brice Milliorn have a deal for you! He's auctioning off his iPhone app business, which he says has 87 different apps for sale, over on eBay.

Milliorn says he started out developing apps on his own, but the business is just too big for him to keep up so he's selling all of the apps and their rights, all of the source code, and technical support for two months to transition everything over to the new owner. He doesn't specifically say that he'll transfer the developer account on Apple's App Store to your name (he says he'll send over a DVD with the source code and transfer "the whole kit and caboodle" to you), but we presume that's what will happen -- of course if you go for it, you're doing this at your own risk.

What will a burgeoning App Store business, complete with apps like iSexyRef and Swine Flu cost you? Just a cool $100 grand. That's the starting bid in the eBay auction, which has just over a week left and no bids as of this writing. There are certainly less expensive ways to get started selling apps on the store. It only costs $100 to register in Apple's Developer Program for a year, and then you just need to find a developer you can pay -- or even do it yourself with a helper service).

If you'd rather start off with a bunch of marginal to silly 99-cent apps and happen to have an extra $100,000 lying around to spend (maybe for a nice holiday gift?), here's your opportunity.

Apple typically opens retail stores in high-end shopping areas, and this one is as high-end as it gets.

Beneath the great glass pyramid that marks the entrance to the Louvre Museum in Paris is Carrousel du Louvre, home to shops, a gourmet food court, exhibition space and, as of this Saturday, an Apple Store. This will be the first Apple Store in Paris and in France. Another Apple Store is poised to open in the seaside town of Montpellier next Saturday.

This location has the now iconic glass spiral staircase that's featured in other flagship stores and two levels total. If you can't visit Apple Store Carrousel du Louvre this weekend, check out the photos and coverage from ifoAppleStore as well as these photos on Flickr. C'est Magnifique!

Also notable this week is the new Musee du Louvre app that's available for free from the App Store [iTunes link]. Coincidentally, of course.