I wrote about Xacktunes, now Bandwagon, before and now it is set to launch real soon.

Bandwagon helps make life easier for music geeks that backup using rsync/ftp or to cds + dvds.

Until our official launch on Feb 22 PST, we are giving away one-year subscriptions to Bandwagon. You get the full application and unlimited storage (need Mac OS 10.4 + iTunes 7).

What do I think?

Technorati Tags: backup, iTunes

First, the logo is phallic! C’mon – can’t you guys think of something better? Frankly, I like the code-name of Xacktunes better than Bandwagon.

Next, it is a “start-up looking for a problem”. Whilst back-up technology is almost mature, computer users still do not back-up religiously. Why? Because it is too much of a hassle and not to mention expensive. However, Bandwagon is joining the bandwagon (no pun intended). How difficult is it to use Apple’s Backup software? How about the other software that back-ups anything you like, in addition to your music library? With Leopard’s Time Machine, it will even make it easier for users to back-up their data. Again, do the math – storage cost, ease of use, speed of recovery – these are the factors that you need to look at. The key in backing up is speed – speed to back-up and recover. What is the point of a one-click service if it takes forever to save and restore your data?

Third, this is not for the Philippines. It is perhaps for those in Japan and South Korea who have ultra fast broadband connections (ok, I will add the US as well even they are lagging behind these two countries). However, would they trust on-line back-ups more than having their external drive in a fire-proof safe?

Lastly, the service is risking a lot. What I hate to see is for a company to go belly-up just because it did not see what is coming. There are too many variables here. [1] Storage is getting cheaper. The peace of mind that you get from knowing that all your data are easily accessible has more value than relying on someone to keep it for you (besides, do they give you insurance?) [2] Back-up software such as Apple’s Back-up, Time Machine, Dobry Backuper, and SuperDuper, some of which are free, provide a better option. Who would want a separate (and not free) tool to back-up their music? How about your photos, videos and other documents? and lastly [3] other free on-line services such as Box.net, etc. that provide free initial storage space and affordable paid services have no restrictions to the type of data that you can store. Why not use Amazon S3 directly like what Adrian Holovaty is doing? Heck, I am sure he can give you his Python script for free.

What I’d recommend Bandwagon do is to add more value to their services. Provide free music ripping/video encoding services as part of your subscription. Imagine having folks who still have a collection of vinyl, tapes, laser discs and beta tapes and having them digitized and stored on Bandwagon for free would definitely make it a cut-above-the-rest, so to speak. Nobody, afaik, does that yet, at least locally – ripping/encoding services with accompanying storage and software.

Just a disclaimer, whilst Bandwagon is giving free 1-year subscription to bloggers to link to them, this article was not written with that mind. Heck, if they can give me a cheap 200GB external HDD instead of their free 1-year subscription, which I may not really use not because of their services but because of the crappy broadband speeds we are getting locally, then I’d gladly accept it.

BTW, to the Xackup folks, if you want some ideas, I can pitch some your way. I checked your site and I have some comments regarding some of your soon-to-be-released services.

Apple releases Security Update 2007-02 that fixes several MOAB bugs that were reported last month. The bugs fixed are MOAB-09-01-2007, MOAB-29-01-2007, MOAB-20-01-2007 and MOAB-22-01-2007.

I do not know why Apple decided to delay the fixes for the other MOAB bugs – 31 reported bugs, 5 of which are from third-party software developers/companies. I am sure that the others will be addressed soon but the question is how soon?

Frankly, I’d rather not see 10.4.9 but instead see 10.5 released soon (with these bugs fixed!).

Image courtesy of fridgerock

Technorati Tags: security,Mac OS X

Granting that Apple is not going to allow third-party applications to be installed in the iPhone, I began re-thinking why I want a phone that is “open”. The only reason is the limited (read: crappy!) applications that are bundled with the phone. Third-party developers often answer that need. What apps do I want in the iPhone anyway?

Web browser and RSS. The bundled mini-Safari or whatever you call it must come with RSS support. I just hope that it is better than Symbian S60 WebKit browser in the sense that you can read RSS feeds whilst off-line.

VoIP. With Wi-Fi support, having a Skype client or better yet, a SIP-compliant client, like Gizmo, is a plus.

iChat and GTalk. Need I say more? This is better than having an SMS-based interface to these IM services.

Mail client. The mini-Mail.app that is bundled better support POP, IMAP and SMTP with authentication.

PDF reader. It beats taking those manuals and eBooks with you on your phone rather than carrying a notebook. Add annotations and you have a killer mobile app!

Notebook. Although it’d be best if it supports the Open Document Format but a simple HTML support would be acceptable. Something that allows you scribble notes, create to-do and shopping lists or write blog entries.

Enhanced iSync. Whilst iSync makes sure that your Addressbook and Calendar are synced, it will be great if you can sync your e-mail as well. That way, you can sync your mailbox, leave your computer, send/receive email whilst on the go and at the end of the day, re-sync it with your main Mac. Won’t that be cool?

Apple Remote Desktop or VNC. For those who maintain servers remotely, this one is a killer application. Heck, it is even great if you can control your Mac using your iPhone, right? If Apple considers adding this, it will definitely rock.

So there – give me these applications and you can close the iPhone all you want!

How about you, do you think I missed a couple of must-have applications?

Ultimate iPhone FAQs List, Part 2:

Jobs: “Java’s not worth building in. Nobody uses Java anymore. It’s this big heavyweight ball and chain.”

I am wondering if Jobs even has a clue that mobile Java is different compared to the desktop Java that Apple implements themselves and bundles with Mac OS X. Java ME, or Mobile Edition to those who live under a rock, requires such a small footprint that adding it to a 4GB pseudo-Mac OS X-running wanna-be smartphone shouldn’t be an issue. C’mon, if you can add Flash, why not Java ME?

Heck, I expect the iPhone to come with CDC (Connected Device Configuration) since it is oh-so-powerful. However, considering that Jobs wants a closed-platform, then I do not see the need to even add Java ME. Bummer!

Technorati Tags: iPhone, java

You must have heard, seen or read about Apple’s new all-in-one device that will revolutionize the mobile phone industry. I am sure that the other phone manufacturers are scrambling now – trying to figure out how they can come up with a better product as soon as possible. The problem is, the iPhone is peppered with patents, which will make it more difficult to copy.

What do I think about the new phone?

First, Apple definitely ups the ante with the introduction of this new device. The OS that runs the mobile device alone is unique and cannot be duplicated without paying Apple a hefty fee. First impression, this is a killer device.

I will no longer dig deeper into what makes the device a winner because the keynote alone will do that. However, I do have some qualms about it. So here’s why it sucks.

1. Not a 3G device. Going GSM is a good decision but restricting it to EDGE instead of going straight on to HSDPA is ridiculous! If it full mobile connectivity is planned, then go for the fastest available wireless data connection. The auto-switching between EDGE and WiFi would have been made even better if it were HSDPA and WiFi.

2. No camera in front. Having only one camera at the back restricts its iChat-like conferencing feature. How can you make a video call without have a camera on the same side as the screen?

3. 2-Megapixel fixed focus camera. One of the newest craze in camera-phone is auto-focus. 2-Megapixels is acceptable as a cam-phone but not having auto-focus simply makes this inferior. My old cam-phone has auto-focus already — I think Apple missed this one.

4. Third-party applications. Whilst it is not yet clear as to what types of applications will run on the device besides those that were mentioned in the demo, it would have been better if the device has Java ME support, at the very least. I wonder if it can open office documents.

5. Locked to Cingular. Apple’s decision to lock it to Cingular when it’s released this June gives other phone manufacturers the chance to catch up – if they can. If it were unlocked, Apple will make a killing this June since everyone who is covered by a GSM-based mobile phone network will be able to buy one and use it right away. I guess they need to partner with Cingular to have the phone subsidized a bit – otherwise, it will be extremely expensive. Dang, it would have been a breakthrough in mobile phone device sales in the US if they offered it as an open-line.

I am hoping that by delaying its release in Europe in Q4 2007 and Asia in 2008 will result in a revision 2 to be offered to these market instead. It will give Apple more time to improve on the phone and provide us with the features that I find lacking.

Will I get one? Hell yes! However, since it is not available outside of the US until late this year, I can go buy another phone from another manufacturer and save up for Q4 2007/Q1 2008.

Technorati Tags: iPhone,Apple,Mobile Phone

I have stopped posting blog entries covering the Month of Apple Bugs and MOAB Fixes. I will let the two groups slug it off until the end of the month and see if and when Apple finally fixes these bugs.

As it is, the bugs reported so far are those from applications that are non-essential to the operation of the entire Mac OS X. I mean, it can run without Quicktime, VLC or even iPhoto’s photocasting. I am still waiting for that critical bug that can crash the OS.

As to the MOAB cause, well, personally, I’d rather that they inform Apple about the said vulnerability first before they released it – I mean, give Apple a week headstart just so they are deemed as “ethical”. Unfortunately, some camps consider the MOAB a publicity stunt crafted by these individuals.

Stunt or not, ethical or otherwise, I am glad that these bugs are being brought into the open. Whilst the fix are being released at the same rate as they’re exposed, I am wondering when Apple will finally release a statement about these bugs and the accompanying fixes. Maybe Apple is waiting for the month to end and just release on big Security Update to fix everything.

MOAB-03-01-2007: Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability:

A month ago, a vulnerability in QuickTime was exploited to spread a worm in MySpace. The vulnerability was first published by pdp. In his article, pdp describes how HREFTrack attribute in .mov files can be used for malicious scripting. The MySpace worm abused this vulnerability in a cross-site scripting attack vector.

This MoAB issue shows that this vulnerability can also be used in a cross-zone scripting attack which could allow, in combination with other vulnerabilities, to remotely execute arbitrary code on the user’s machine, as well as disclosure of the filesystem contents.

I thought that the Security Update released by Apple fixed this problem already. However, checking the details of the bug, only Windows has been tested. I am not sure if it still affects the Mac – if not, who cares about Windows?!

Technorati Tags: quicktime, vulnerability

So, part brain exercise, part public service, I’ve created a runtime fix for the first issue using Application Enhancer. If I have time (or assistance), I’ll attempt to patch the other vulnerabilities, one a day, until the month is out.

Landon Fuller releases a fix to the first bug that was reported during the Month of Apple Bugs. Let us see if he can catch up with the MOAB folks.

Technorati Tags: quicktime, vulnerability

A format string vulnerability exists in the handling of the udp:// URL handler. By supplying a specially crafted string, a remote attacker could cause an arbitrary code execution condition, under the privileges of the user running VLC.

VLC vulnerability has been exposed as bug no. 2. I am wondering, since this is a VLC bug and not Apple’s fault, really, why is it part of the MOAB?

And oh, it also affects VLC on other platforms! Hmmm… I am beginning to think that the MOAB folks are starting to get desperate by exposing bugs that are entirely not Apple’s doing.

Technorati Tags: mac os x, vlc, vulnerability

MOAB-01-01-2007 – Apple Quicktime rtsp URL Handler Stack-based Buffer Overflow:

A vulnerability exists in the handling of the rtsp:// URL handler. By supplying a specially crafted string (rtsp:// [random] + semicolon + [299 bytes padding + payload]), an attacker could overflow a stack-based buffer, using either HTML, Javascript or a QTL file as attack vector, leading to an exploitable remote arbitrary code execution condition.

Exploitation of this issue is trivial, and stack NX can be rendered useless via ret-to-libc.

First bug appeared on-line. Good thing that I do not use Quicktime to handle RTSP.

And oh, it does affect Quicktime on Windows as well.

Technorati Tags: mac, mac os x, quicktime, vulnerability