We, of course, had lunch with our favorite Canadian developers at WWDC. Talking with Dave, Roustem and the rest of the crew from Agile Web Solutions is something I look forward to anytime we're all in San Francisco. I didn't film the whole lunch; being filmed eating is almost as awkward as eating alone in the cafeteria, I think. So here's a quick -- but very interesting -- clip of Dave Teare explaining how cut-and-paste in iPhone OS 3.0 is going to be used in 1Password. If you're a 1Password user, you'll probably want to check it out!

Update: The Agile Web Solutions guys have been nice enough to extend beta invites to another 100 TUAW readers. Those that don't make it into the first round, don't worry, the guys said they will be putting you on a waiting list and accessing that over the next couple of months, so with any luck, everyone can get in on the fun! Check out http://switchersblog.com for details in the coming weeks. Once again, send an e-mail with the subject "I want my 1P3 beta!" to 1P3Promo [at] agile [dot] ws!

I am a huge fan of Agile Web Solutions's 1Password. It's always one of the first applications I install on a freshly formatted Mac, and I use it countless times a day to manage my logins to various web sites, forums, shopping sites and more. I used to be really, really bad about using the same few passwords for every login, but the strong password generator coupled with support across browsers (and on the iPhone and iPod touch) makes it easy for me to have distinct and secure logins all over the web.

Last night, the Agile Web Solutions team released the 2.9.19 beta (with support for Safari 4), and if you subscribe to the 1Password newsletter, you know that 1Password 3.0 is gearing up for testing before being released later this year.

We've got some juicy details about what to expect in 1Password 3.0 and a chance for current 1Password fans to get in on the private 1Password 3.0 beta! Read on...

Gallery: 1Password 3 beta

It's always a pleasure to see the guys from Agile Web Solutions. I spoke to them about three upcoming features for 1Password, their secure, password-collecting, form-filling application. I won't go into a lot of detail on 1Password, we've mentioned it a few times before.

First, we talked a little about the new Agile Keychain format; being a package format, it opens up quite a few possibilities, including the (upcoming) ability to add encrypted notes in rich text format, complete with links and attachments. We also talked about what happened to my1Password, the web-based version of 1Password: it's evolving into a portable version which can be carried around on a USB stick or accessed through something like drop.io. Lastly, they're incorporating fingerprint scanning (0Password?), which will work with both wired and portable USB versions of the fingerprint scanner.

Thanks to Dave and Roustem for their time! Note that I made it through this post without making a single reference to your Canadian colloquialisms, eh? Also note that it's Roustem on the left and Dave on the right at the beginning of the clip, even though I introduced them the other way around.

Read on for the video.

Agile Web Solutions today offered its customers a Thanksgiving present: a free copy of 1Password. Existing customers are encouraged to give up to three extra licenses to their friends by visiting Agile's website and providing their information.

New customers can also benefit: If you purchase 1Password today, you get two licenses for the price of one. Agile is also offering a discount to new orders, taking 15 percent off your final total.

The promotion ends Sunday.

We may have mentioned it one or two (dozen) times, but 1Password is a great solution for securely managing passwords, credit cards and notes on a Mac (and recently the iPhone). If you're a 1Password fan, be sure to check out the 2.9 release from last weekend; it has a pretty huge new feature. For quite a while now there have been grumblings about the OS X Keychain being a bit of a beast, especially when handling large amounts of data. Rather than waiting out Apple for new improvements to the Keychain system, the stalwart coders at Agile Web Solutions decided to write their own.

If you dig into the Keychain section of the preferences in 1Password 2.9, you'll find an option to "Switch to Agile Keychain Format." What's the difference? First, it allows easy file-based synchronization, making possible non-MobileMe solutions for syncing up multiple Macs. Further, it maintains speedy access even when it contains gigs of data, as well as supporting much higher levels of encryption. Sounds good to me.

If you're ready to switch your keychain format, head over to the developer's blog for detailed instructions, and read up on the various options for automatic sync between Macs. 1Password 2.9 is a free upgrade for existing users, and new users can grab a free trial. A single license runs $39.95USD with a family pack available for $59.95USD. For the full changelog for this release, check the version history page.

Consumer Reports, in its annual internet security survey, recommended that Mac users avoid Safari because of its lack of phishing protection. Instead, they recommend users install Firefox 3 or Opera 9.5 as their default browsers, since both will warn users before displaying the contents of sites known to be source of scams and personal information theft.

Jeff Fox, technology editor at Consumer Reports, noted that "e-mail is the weak vector on the Mac," meaning that most successful phishing attacks on Mac users arrive via email.

"Windows users are used to being paranoid about not clicking [links in phishing emails]," he said. "Mac users aren't, even though they say, 'Antivirus software, who needs it?'"

As we've mentioned before, 1Password does a great job of adding phishing protection to Safari. Also, always be extra-wary of clicking links in emails from people you don't know.

[Via Computerworld.]

• dual PIN and Master Password security, so you can quickly access "less important" stuff via the PIN
• wireless secure sync with one or more Macs
• built-in browser
• and it's free! (The desktop app costs $34.95 for a single license.)

I know we just mentioned the upcoming iPhone version of 1Password yesterday, so I'll make this quick. Version 2.7 (of the desktop variety) was just released and it adds a brand new feature: a fully keyboard-accessible HUD window which allows you to instantly navigate to a website and log in.

According to the developers, this feature has been In the works for over a year. It integrates all of your "Go & Fill" 1Click bookmarks directly into your web browser. The HUD window (yes, I have a weak spot for those sexy, transparent black HUDs) has a search feature at the top of it which allows for speedy location of the bookmark you're looking for.

So, please excuse the extra mention; I think this new feature is useful enough to warrant a quick note. Current users just need to check the auto-updates within the application. Curious parties can visit the 1Password page.

We stumbled upon some preview pictures of 1Password for the iPhone (see our WWDC chat with Agile Web Solutions), which were deleted almost as quickly as they surfaced on Dave Teare's photostream. Since we are, for the moment, playing by the rules of finders, keepers, we (gently) persuaded Dave to give us a little more info on what we were seeing.

It looks like the PIN field shown will allow for quick access to "less sensitive" information, such as your Digg or Flickr logins. For more secure sites, such as your bank account, the usual Master Password is implemented. Dave says they considered using gestures and other creative methods for unlocking, but in the end a "PIN feels more natural and is a well-understood concept, and you can't beat a real password for security."

Interesting to note is that the 1Password iPhone application will, itself, be a browser. Because of Apple's rules regarding "hacking" existing applications, they couldn't modify Safari to integrate 1Password. But Dave says that they're adding some "cool features" that will "make users not want to use Safari directly anyway." Personally, I'm more than willing to switch browsers for added security and convenience.

It looks like the 1Password team is going to miss the big App Store opening day, but they plan to be in there shortly after.

Gallery: 1Password iPhone sneak peek

Phishers -- in their sinister attempts to bilk you out of your time, money, and personal information with bogus emails -- are becoming more and more clever. Luckily, with a little critical thinking and up-to-date software, you can keep yourself safe.

Typically, to avoid falling victim to phishing, check the URL that the email is asking you to click. Does it look right? One popular façade for phishing attempts is PayPal, and there's a new technique that makes it look like the request is coming, securely, from paypal.com. For the technical among us, it exploits a flaw in one of PayPal's screens that allows a phisher to include a redirect URL in an address that begins with https://www.paypal.com. Sneaky. Thankfully, Firefox blocks it on the rebound.

Also, emails that ask you to verify or enter account information (that you've already entered) have a high degree of poopiness about them. Reader Allan noted that because Apple is in the process of switching people to Mobile Me, some phishers are using the confusion to send people emails asking them to enter new billing information for the new service. That, of course, isn't necessary, and if you get that kind of email, you should delete it.

Another good way to protect yourself is to use an up-to-date browser. Firefox includes protection against known phishing sites, and warns you about them before letting you proceed. Safari, currently, does not, but 1Password does, and it works seamlessly with Safari. Installing one of these options is especially important for parents and grandparents that may not be as familiar with these attacks as their kids.

Lastly, there's a great overview at macphishingprotection.com, which notes, "Phishers win even if you make only one mistake." Truer words never spoken.

Thanks, Allan, Fernando and Aviv for the heads-up!

Dave and Roustem from Agile Web Solutions, authors of the form-filling powerhouse known as 1Password, were happy to talk about WWDC, Mac development and the future of 1Password and its upcoming iPhone counterpart. We've taken quite a few notes as 1Password has developed, and while I love the iPhone bookmarklet, I'm excited to see work being done on a native app!

There were laughs, tears and some pronounced (and lovable) Canadian colloquialisms. And that's just in the 10 minutes that survived the editing. Video after the jump.

[Viddler Link | QuickTime Version]

If you're an independent Mac software developer, having a wicked cool icon for your application is both a blessing and a curse. Users will remember you for the sleek, Leopard-ready goodness of your icon ... and other unscrupulous marketers will rip you off shamelessly to promote their own products, rather than ponying up for an original design.

The all-time champion victim (self-reported) of icons ripped off is Panic's Transmit FTP tool; the little truck shows up just about everywhere you could possibly imagine. New to the underground icon market, however, is the 1Password browser-key logo -- it may make you think "Hey, I could drive Safari to the supermarket!" but apparently the makers of ProductKeyFinder, a Windows serial number app, found it too delicious to pass up. The purloined product identity is visible on PKF's eBay sales page and on Flickr. It looks like the packaging has been updated (and the product renamed to Product Key Explorer), so this tale of icon swiping has a happy ending.

Thanks Roustem!