Skip to Content

iPod touch firmware, Bonjour for Windows close security holes

by Michael Rose Sep 9th 2008 at 6:15PM

It's not all new features and delight behind the scenes with the now-shipping iPod touch 2.1 firmware -- among the updates and changes are five patches to address security issues with the device. Frameworks that have been tweaked include the Application Sandbox, CoreGraphics, the mDNSResponder, Networking, and WebKit.

The mDNS fix tackles the Dan Kaminsky DNS vulnerability that sparked controversy over the pace of Apple's patch releases... yet more proof that the iPod touch is a teensy little computer, with all the risks and challenges thereto. You can review the security notes for the update at Apple's security site, and of course you can download the update through iTunes.

Also updated for security purposes today was the Bonjour for Windows package, now at version 1.0.5. This utility, which gives XP and Vista machines access to zero-configuration network resources such as printers or Mac OS X web sharing, now includes a couple of DNS-related patches including one for the vulnerability noted above. See here for the full details; Bonjour for Windows is downloadable from Apple as well.

View Tags

Related Stories

Categories

iPod Family Security

It's not all new features and delight behind the scenes with the now-shipping iPod touch 2.1 firmware -- among the updates and changes are...
 

Add a Comment

Sign in »
*0 / 3000 Character Maximum

9 Comments

Filter by:
Level 5

"The Bonjour Setup Wizard makes setting up a printer in Windows as easy as in Mac OS X (we can’t make it as beautiful, unfortunately)."

Thanks Apple, for fueling the fanboy fire. Christ.

September 10 2008 at 8:57 AM Report abuse rate up rate down Reply
Matt

Well the question I cann not find anywhere on teh internet is if 3rd party application push notification is enabled in 2.1. Thats all I really want and I sure hope it is and the apps just need to be updated.

September 10 2008 at 2:15 AM Report abuse rate up rate down Reply
Travis

What is that on the Touch in this article?

September 10 2008 at 12:11 AM Report abuse rate up rate down Reply
1 reply to Travis's comment
OmniGeno

It's a free music-rhythm game called Tap Tap Revenge.

September 10 2008 at 1:49 AM Report abuse rate up rate down Reply
mrsteveman1

The DNS thing, i believe, was about caching DNS servers though, not clients. So is there a caching DNS daemon running on the touch?

September 09 2008 at 8:36 PM Report abuse rate up rate down Reply
1 reply to mrsteveman1's comment
Michael Rose

Servers are more likely to be attacked or compromised, but the spoofing vulnerability applies to both servers and clients.

September 09 2008 at 11:24 PM Report abuse rate up rate down Reply
forbin

I upgraded my ipod touch 1g to 2.1 and I'm getting no genius function. I activated genius in itunes and it works fine there but when I tap a song on the ipod there's no genius button. What gives?

September 09 2008 at 8:08 PM Report abuse rate up rate down Reply
1 reply to forbin's comment
Gareth

I had the same problem. Just upgraded to 2.1 on my 1st gen Touch and no sign of the Genius option even though I setup Genius in iTunes 8. After the upgrade I downloaded some App updates in iTunes and then did an iPod sync and Genius has now appeared. I suppose it makes sense that the track data iTunes collected during the Genius setup needs to be sync'd to the iPod but you'd have thought it would have done that automatically during the 2.1 upgrade process....Surely it wouldn't take a Genius to make that happen! :)

September 10 2008 at 1:38 PM Report abuse rate up rate down Reply
Flunky Carter

MYEK MYEK MYEK!!
ANOTHER FIRST!!!

MYEK!!@!1@1

September 09 2008 at 6:55 PM Report abuse rate up rate down Reply
Buy an ad here

Hot Apps on TUAW

Tweets

© 2012 AOL Inc. All Rights Reserved.