Filed under: iPod Family, Security
iPod touch firmware, Bonjour for Windows close security holes
It's not all new features and delight behind the scenes with the now-shipping iPod touch 2.1 firmware -- among the updates and changes are five patches to address security issues with the device. Frameworks that have been tweaked include the Application Sandbox, CoreGraphics, the mDNSResponder, Networking, and WebKit. The mDNS fix tackles the Dan Kaminsky DNS vulnerability that sparked controversy over the pace of Apple's patch releases... yet more proof that the iPod touch is a teensy little computer, with all the risks and challenges thereto. You can review the security notes for the update at Apple's security site, and of course you can download the update through iTunes.
Also updated for security purposes today was the Bonjour for Windows package, now at version 1.0.5. This utility, which gives XP and Vista machines access to zero-configuration network resources such as printers or Mac OS X web sharing, now includes a couple of DNS-related patches including one for the vulnerability noted above. See here for the full details; Bonjour for Windows is downloadable from Apple as well.
![TUAW [Cafepress]](http://www.blogsmithmedia.com/www.tuaw.com/media/tuaw-cafepress-promo.png)
Reader Comments (Page 1 of 1)
Flunky Carter said 6:56PM on 9-09-2008
MYEK MYEK MYEK!!
ANOTHER FIRST!!!
MYEK!!@!1@1
Reply
luke said 8:08PM on 9-09-2008
I upgraded my ipod touch 1g to 2.1 and I'm getting no genius function. I activated genius in itunes and it works fine there but when I tap a song on the ipod there's no genius button. What gives?
Reply
Gareth said 1:40PM on 9-10-2008
I had the same problem. Just upgraded to 2.1 on my 1st gen Touch and no sign of the Genius option even though I setup Genius in iTunes 8. After the upgrade I downloaded some App updates in iTunes and then did an iPod sync and Genius has now appeared. I suppose it makes sense that the track data iTunes collected during the Genius setup needs to be sync'd to the iPod but you'd have thought it would have done that automatically during the 2.1 upgrade process....Surely it wouldn't take a Genius to make that happen! :)
mrsteveman1 said 8:38PM on 9-09-2008
The DNS thing, i believe, was about caching DNS servers though, not clients. So is there a caching DNS daemon running on the touch?
Reply
Michael Rose said 11:24PM on 9-09-2008
Servers are more likely to be attacked or compromised, but the spoofing vulnerability applies to both servers and clients.
Travis said 12:11AM on 9-10-2008
What is that on the Touch in this article?
Reply
OmniGeno said 1:49AM on 9-10-2008
It's a free music-rhythm game called Tap Tap Revenge.
Matthew said 2:18AM on 9-10-2008
Well the question I cann not find anywhere on teh internet is if 3rd party application push notification is enabled in 2.1. Thats all I really want and I sure hope it is and the apps just need to be updated.
Reply
Level 5 said 8:57AM on 9-10-2008
"The Bonjour Setup Wizard makes setting up a printer in Windows as easy as in Mac OS X (we can’t make it as beautiful, unfortunately)."
Thanks Apple, for fueling the fanboy fire. Christ.
Reply
samuel said 12:00AM on 9-13-2008
This latest advertising imagery for the iPod Touch surley has to be with intent to peeve iPhone users as they're only option is the cheap looking plastic backing. This backing also makes the whole iPod Touch look free from complexity, just for cool people and their cool music.
Shame about the plastic black wireless block at the top.
Reply